Path Traversal Vulnerability in Nextcloud Server Versions
CVE-2026-45279

4.4MEDIUM

Key Information:

Vendor

Nextcloud
Status
Security-advisories
Vendor
CVE Published:
1 June 2026

What is CVE-2026-45279?

A vulnerability in Nextcloud Server allows non-admin users to potentially copy arbitrary files into their own directories through a path traversal issue. This occurs when the {lang} variable is utilized improperly in the template directory configuration. The vulnerability affects multiple versions of Nextcloud Server and can be exploited depending on Unix permissions, making it crucial for users to update to the latest versions to mitigate risks.

Affected Version(s)

security-advisories >= 31.0.0, < 31.0.14 < 31.0.0, 31.0.14

security-advisories >= 32.0.0, < 32.0.4 < 32.0.0, 32.0.4

References

https://github.com/nextcloud/security-advisories/security...
x_refsource_CONFIRM
https://github.com/nextcloud/server/pull/57414/files
x_refsource_MISC
https://hackerone.com/reports/3468140
x_refsource_MISC

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.