CVE-2026-45277CWE-200

Nextcloud: Information disclosure in Nextcloud Approval app via fileId parameter reveals workflow associations

Low · published June 1, 2026

CVSS v3.1
3.3
EPSS
0%
Percentile
6.3
In the wild
Unconfirmed
What it is

Nextcloud is an open source content collaboration platform. Prior to version 2.7.2, authenticated users can check if arbitrary files are associated with specific approval workflows where they can request approval. This issue has been patched in version 2.7.2.

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00172 · 6.3th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2026-06-01T16:51Z
EPSS history
Timeline
  • 01 JUN 16:51Z
    Nextcloud: Information disclosure in Nextcloud Approval app via fileId parameter reveals workflow associations
    cvelistv5