CVE-2026-45277

—

CVSS 3.1

3.3 low

EPSS

<1%p3

Published

Jun 1, 2026 (Jun 1, 2026)

Modified

Jul 22, 2026

Description

Nextcloud is an open source content collaboration platform. Prior to version 2.7.2, authenticated users can check if arbitrary files are associated with specific approval workflows where they can request approval. This issue has been patched in version 2.7.2.

Vendors: nextcloud
Products: approval
Weakness: CWE-200
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.1%)

In the news0 stories

No ingested article mentions this CVE yet.