Vulnerability · Published Dec 5, 2025 · Assigned by GitHub_M
CVE-2025-66515Nextcloud Approval app allows users to request approval for other users file
Low 2.7
In plain English
A low-severity improper authentication in security-advisories from nextcloud. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 27% of all known vulnerabilities).
Severity (CVSS 3.1)2.7Low
Exploit odds (30 days)0.3%top 73.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
The Nextcloud Approval app allows approval or disapproval of files in the sidebar. Prior to 1.3.1 and 2.5.0, an authenticated user listed as a requester in a workflow can set another user’s file into the “pending approval” without access to the file by using the numeric file id. This vulnerability is fixed in 1.3.1 and 2.5.0.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| nextcloud | security-advisories | >= 2.0.0, < 2.5.0< 1.3.1 |
Weakness: CWE-287 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
References
- https://github.com/nextcloud/security-advisories/security/advisories/GHSA-q26g-fmjq-x5g5 x_refsource_CONFIRM
- https://github.com/nextcloud/approval/pull/334 x_refsource_MISC
- https://github.com/nextcloud/approval/commit/e30b56b7832255311ac800b7875f44866e88fff4 x_refsource_MISC
- https://hackerone.com/reports/3338748 x_refsource_MISC