CVE-2025-66547 — Nextcloud Server users can modify tags on files that do not belong to them
Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Enterprise Server prior to 31.0.1, non-privileged users can modify tags on files they should not…
Published: 2025-12-05 · CVSS: 4.3 · CVSS 3.1
Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Enterprise Server prior to 31.0.1, non-privileged users can modify tags on files they should not have access to via bulk tagging. This vulnerability is fixed in 31.0.1.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7