PT-2026-45522 · Nextcloud · Nextcloud

Modhanami · Published 2026-06-01 · Updated 2026-06-02 · CVE-2026-45277

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Nextcloud versions prior to 2.7.2

Description Authenticated users can verify if arbitrary files are linked to specific approval workflows used for requesting approval.

Recommendations Update to version 2.7.2.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2026-45277

Affected Products

Nextcloud

References · 5

• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-h7gm-vgxr-9hcw · Vendor Advisory
• https://github.com/nextcloud/approval/pull/356 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-45277 · Security Note
• https://t.me/cveNotify/165645 · Telegram Post
• https://hackerone.com/reports/3475210 · Note