Vulnerability · Published Jul 6, 2026 · Assigned by GitHub_M
CVE-2025-53829ownCloud 10 is vulnerable to Relative Path Traversal
High 8.0
In plain English
A high-severity security flaw in ownCloud 10 from owncloud. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 44% of all known vulnerabilities).
Severity (CVSS 3.1)8.0High
Exploit odds (30 days)0.5%top 56.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
ownCloud is a file storage, synchronization, and sharing application. In ownCloud 10 prior to version 10.15.3, an attacker with administrative privileges can exploit a path traversal vulnerability in the system to execute arbitrary code. Upgrade ownCloud 10 to version 10.15.3 or later to receive a patch.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| owncloud | ownCloud 10 | < 10.15.3 |
Weakness: CWE-23 · Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H