CVE-2025-66556CWE-639

CVE-2025-66556

Low · published December 5, 2025

CVSS v3.1
3.5
EPSS
0%
Percentile
15.9
In the wild
Unconfirmed
What it is

Nextcloud talk is a video & audio conferencing app for Nextcloud. Prior to 20.1.8 and 21.1.2, a participant with chat permissions was able to delete poll drafts of other participants within the conversation based on their numeric ID. This vulnerability is fixed in 20.1.8 and 21.1.2.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00253 · 15.9th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2025-12-05T23:15Z
Affected products (2)
ProductVersionsFixed in
nextcloud/talk≥ 20.0.0, < 20.1.820.1.8
nextcloud/talk≥ 21.0.0, < 21.1.221.1.2
References (4)
https://github.com/nextcloud/security-advisories/security/advisories/GHSA-pr9f-vqgg-m2jh · [email protected]https://github.com/nextcloud/spreed/commit/bd68e80d1dea98d84c1d621c2c681238cf041725 · [email protected]https://github.com/nextcloud/spreed/pull/15532 · [email protected]https://hackerone.com/reports/3247386 · [email protected]
EPSS history
Timeline
  • 05 DEC 17:56Z
    Nextcloud talk allows participants to blindly delete poll drafts of other users by ID
    cvelistv5