CVE-2025-47794

Nextcloud Server vulnerable to insecure temporary file creation, race with write access and permission

State: Published
Severity: 2.6 Low
Published: May 16, 2025
Updated: May 16, 2025
Reserved: May 9, 2025

Description

Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server prior to 29.0.13, 30.0.7, and 31.0.1 and Nextcloud Enterprise Server prior to 26.0.13.13, 27.1.11.13, 28.0.14.4, 29.0.13, 30.0.7, and 31.0.1, an attacker on a multi-user system may read temporary files from Nextcloud running with a different user account, or run a symlink attack. Nextcloud Server versions 29.0.13, 30.0.7, and 31.0.1 and Nextcloud Enterprise Server 26.0.13.13, 27.1.11.13, 28.0.14.4, 29.0.13, 30.0.7, and 31.0.1 fix the issue. No known workarounds are available.

Scores

CVSS	Score	Vector	Source
3.1	2.6 Low	CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N	GitHub_M

Weaknesses

CWE-284 Improper Access Control

Affected Products

Product	Versions
security-advisoriesnextcloud	>= 26.0.0, < 26.0.13.13Affected >= 27.0.0, < 27.1.11.13Affected >= 28.0.0, < 28.0.14.4Affected >= 29.0.0, < 29.0.13Affected >= 30.0.0, < 30.0.7Affected >= 31.0.0, < 31.0.1Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.