CVE-2025-66552
No fix known EPSS <1%CVSS 4.3
Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Enterprise Server prior to 30.0.9 and 31.0.1, incorrect path handling with groupfolders caused the admin_audit app to not properly log all actions on files and folders inside groupfolders. This vulnerability is fixed in Nextcloud Server and Enterprise Server prior to 30.0.9 and 31.0.1.
Products: nextcloud security-advisories
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | nextcloud-server-30 | no fix |