CVE Intelligence

Nextcloud Team Folders vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Nextcloud Team Folders: 1 record(s), with affected versions and fixes.

CVE-2026-77169 Medium · 6.5 CWE-284 Sep 17, 2026
Improper Access Control in Nextcloud Team Folders
A vulnerability in the team folders (formerly group folders) app when used in combination with the workspace app allowed API/REST-only delegated administrators to bypass folder-level authorization controls. The workspace app enables organizations to delegate limited administrative privileges for team folder management via API/REST only, restricting access to folders for which the admin has advanced permissions.