CVE-2026-77165

No fix known EPSS <1%CVSS 6.5

File owners were unable to unlock TYPE_TOKEN locks placed by other users, leaving files permanently locked with no recovery path outside of the database.

Published 2026-09-21 · CVE record · OSV

Products: nextcloud server