PT-2026-55940 · Owncloud · Owncloud

Published 2026-07-06 · Updated 2026-07-06 · CVE-2025-53829

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ownCloud versions prior to 10.15.3

Description An attacker with administrative privileges can exploit a path traversal issue to execute arbitrary code. Path traversal is a flaw that allows an attacker to access files and directories that are stored outside the web root folder by manipulating variables that reference files with input that is not properly neutralized.

Recommendations Upgrade to version 10.15.3 or later.

Fix

Relative Path Traversal

Weakness Enumeration

CWE-23

Related Identifiers

CVE-2025-53829

Affected Products

Owncloud

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-53829 · Security Note
• https://github.com/owncloud/security-advisories/security/advisories/GHSA-4439-4wxm-c9px · Note
• https://twitter.com/CVEnew/status/2074180686710521906 · Twitter Post
• https://twitter.com/infoflowcloud/status/2074181978018947490 · Twitter Post