CVE Intelligence

Nextcloud Talk vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Nextcloud Talk: 1 record(s), with affected versions and fixes.
cpe:2.3:a:nextcloud:talk

CVE-2025-66556 Medium · 4.3 CWE-639 Dec 5, 2025
Nextcloud talk allows participants to blindly delete poll drafts of other users by ID
Nextcloud talk is a video & audio conferencing app for Nextcloud. Prior to 20.1.8 and 21.1.2, a participant with chat permissions was able to delete poll drafts of other participants within the conversation based on their numeric ID. This vulnerability is fixed in 20.1.8 and 21.1.2.