CVE-2025-66545Low· 3.5▾ SunlitNextcloud Groupfolders provides admin-configured folders shared by everyone in a group or team. Prior to 14.0.11, 15.3.12, 16.0.15, 17.0.14, 18.1.8, 19.1.8, and 20.1.2, a user with read-only permission can restore a file from the trash b…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 19.3 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
Nextcloud Groupfolders provides admin-configured folders shared by everyone in a group or team. Prior to 14.0.11, 15.3.12, 16.0.15, 17.0.14, 18.1.8, 19.1.8, and 20.1.2, a user with read-only permission can restore a file from the trash bin. This vulnerability is fixed in 14.0.11, 15.3.12, 16.0.15, 17.0.14, 18.1.8, 19.1.8, and 20.1.2.
group_folders < 14.0.11group_folders >= 15.0.0, < 15.3.12group_folders >= 16.0.0, < 16.0.15group_folders >= 17.0.0, < 17.0.14group_folders >= 18.0.0, < 18.1.8group_folders >= 19.0.0, < 20.1.2Upgrade past the affected range:
group_folders 20.1.2Connected by shared product, vendor, weakness, or advisory.
CVE-2025-66558Low· 3.1Nextcloud Twofactor WebAuthn is the WebAuthn Two-Factor Provider for Nextcloud
CVE-2025-66556Low· 3.5Nextcloud talk is a video & audio conferencing app for Nextcloud
CVE-2025-66554Low· 3.5Contacts app for Nextcloud easily syncs contacts from various devices with your Nextcloud and allows editing
CVE-2025-66553Medium· 4.3Nextcloud Tables allows you to create your own tables with individual columns
CVE-2025-66549Low· 2.4Nextcloud Desktop is the desktop sync client for Nextcloud
CVE-2025-66548Low· 3.3Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud