Vulnerability · Published Dec 5, 2025 · Assigned by GitHub_M
CVE-2025-66513Nextcloud Tables app share information not limited to relevant users
Medium 4.3
In plain English
A medium-severity authorization bypass via user-controlled key in security-advisories from nextcloud. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities).
Severity (CVSS 3.1)4.3Medium
Exploit odds (30 days)0.3%top 75.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Nextcloud Tables allows you to create your own tables with individual columns. Prior to 0.8.9, 0.9.6, and 1.0.1, the information which table (numeric ID) is shared with which groups or users and the respective permissions was not limited to privileged users. This vulnerability is fixed in 0.8.9, 0.9.6, and 1.0.1.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| nextcloud | security-advisories | >= 1.0.0-beta.1, < 1.0.1>= 0.9.0-beta.1, < 0.9.6< 0.8.9 |
Weakness: CWE-639 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
References
- https://github.com/nextcloud/security-advisories/security/advisories/GHSA-2cwj-qp49-4xfw x_refsource_CONFIRM
- https://github.com/nextcloud/tables/pull/2148 x_refsource_MISC
- https://github.com/nextcloud/tables/commit/b92b9560b1e70a02b103a7aeb9e22e2ab5231873 x_refsource_MISC
- https://hackerone.com/reports/3334165 x_refsource_MISC