Vulnerability Description
Nextcloud is an open source content collaboration platform. Prior to version 2.7.2, authenticated users can check if arbitrary files are associated with specific approval workflows where they can request approval. This issue has been patched in version 2.7.2.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Nextcloud | Approval | < 2.7.2 |
Related Weaknesses (CWE)
References
- https://github.com/nextcloud/approval/pull/356Issue TrackingPatch
- https://github.com/nextcloud/security-advisories/security/advisories/GHSA-h7gm-vMitigationVendor Advisory
- https://hackerone.com/reports/3475210Permissions Required
FAQ
What is CVE-2026-45277?
CVE-2026-45277 is a vulnerability with a CVSS score of 3.3 (LOW). Nextcloud is an open source content collaboration platform. Prior to version 2.7.2, authenticated users can check if arbitrary files are associated with specific approval workflows where they can requ...
How severe is CVE-2026-45277?
CVE-2026-45277 has been rated LOW with a CVSS base score of 3.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-45277?
Check the references section above for vendor advisories and patch information. Affected products include: Nextcloud Approval.