Nextcloud Server up to 29.0.12/30.0.6/31.0.0 Temporary File access control

Summaryinfo

A vulnerability labeled as critical has been found in Nextcloud Server up to 29.0.12/30.0.6/31.0.0. This vulnerability affects unknown code of the component Temporary File Handler. The manipulation results in access control. This vulnerability is reported as CVE-2025-47794. The attack can be launched remotely. No exploit exists. The affected component should be upgraded.

Detailsinfo

A vulnerability classified as problematic has been found in Nextcloud Server up to 29.0.12/30.0.6/31.0.0. Affected is an unknown part of the component Temporary File Handler. The manipulation with an unknown input leads to a access control vulnerability. CWE is classifying the issue as CWE-284. The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. This is going to have an impact on confidentiality. CVE summarizes:

Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server prior to 29.0.13, 30.0.7, and 31.0.1 and Nextcloud Enterprise Server prior to 26.0.13.13, 27.1.11.13, 28.0.14.4, 29.0.13, 30.0.7, and 31.0.1, an attacker on a multi-user system may read temporary files from Nextcloud running with a different user account, or run a symlink attack. Nextcloud Server versions 29.0.13, 30.0.7, and 31.0.1 and Nextcloud Enterprise Server 26.0.13.13, 27.1.11.13, 28.0.14.4, 29.0.13, 30.0.7, and 31.0.1 fix the issue. No known workarounds are available.

The advisory is shared for download at github.com. This vulnerability is traded as CVE-2025-47794 since 05/09/2025. The exploitability is told to be difficult. It is possible to launch the attack remotely. There are neither technical details nor an exploit publicly available. The MITRE ATT&CK project declares the attack technique as T1068.

Upgrading to version 26.0.13.13, 27.1.11.13, 28.0.14.4, 29.0.13, 30.0.7 or 31.0.1 eliminates this vulnerability.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Cloud Software

Vendor

• Nextcloud

Name

• Server

Version

• 29.0.0
• 29.0.1
• 29.0.2
• 29.0.3
• 29.0.4
• 29.0.5
• 29.0.6
• 29.0.7
• 29.0.8
• 29.0.9
• 29.0.10
• 29.0.11
• 29.0.12
• 30.0.0
• 30.0.1
• 30.0.2
• 30.0.3
• 30.0.4
• 30.0.5
• 30.0.6
• 31.0

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion