Back Feedly

CVE-2026-45277 - Exploits & Severity

Feedly • June 1, 2026

Nextcloud is an open source content collaboration platform. Prior to version 2.7.2, authenticated users can check if arbitrary files are associated with specific approval workflows where they can request approval. This issue has been patched in version 2.7.2.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD published the first details for CVE-2026-45277

A CVSS base score of 3.3 has been assigned.

Feedly found the first article mentioning CVE-2026-45277 . See article

Webinar tomorrow: From alert to resolution in network incident response

CVE-2026-45277 | Nextcloud Approval up to 2.7.1 information disclosure (GHSA-h7gm-vgxr-9hcw)

CVE-2026-45277: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor in nextcloud security-advisories

Collect, analyze, and vulnerability reports faster using AI

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Nextcloud CVE-2026-45277: Low-Severity Information Disclosure Vulnerability CVE-2026-45277 is a low-severity vulnerability affecting Nextcloud versions prior to 2.7.2. Authenticated users could exploit this flaw to determine if arbitrary files are linked to specific approval workflows, potentially exposing sensitive metadata. The vulnerability has a CVSS 3.1 base score of 3.3, indicating limited impact on confidentiality, integrity, and availability. It does not allow for modification or denial of service. The issue has been patched in Nextcloud version 2.7.2, and users are advised to upgrade to this version or later. There are currently no known exploits in the wild. As this is not a cloud service, users must manually apply the update. The vulnerability was published on June 1, 2026. 3 sources 31

Extracted Entities

CVE-2026-45277 - Exploits & Severity

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

Platforms (1)