PT-2025-49269

CVE-2025-66552

·

Published

2025-12-05

·

Updated

2026-10-18

Description by

CVSS 3.1
4.3
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions Nextcloud Server versions prior to 30.0.9 Nextcloud Server versions prior to 31.0.1
Description An issue exists in Nextcloud Server and Enterprise Server related to incorrect path handling with groupfolders. This resulted in the admin audit app failing to log all actions on files and folders within groupfolders.
Recommendations Update Nextcloud Server to version 30.0.9 or later. Update Nextcloud Server to version 31.0.1 or later.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
GHSA-WW9M-F8J4-JJ9X
BIT-NEXTCLOUD-2025-66552
Found an issue in the description? Have something to add? Feel free to write us 👾