CVE-2023-26482

Nextcloud server is an open source home cloud implementation. In affected versions a missing scope validation allowed users to create workflows which are designed to be only available for administrators. Some workflows are designed to be RCE by invoking defined scripts, in order to generate PDFs, invoking webhooks or running scripts on the server. Due to this combination depending on the available apps the issue can result in a RCE at the end. It is recommended that the Nextcloud Server is upgraded to 24.0.10 or 25.0.4. Users unable to upgrade should disable app `workflow_scripts` and `workflow_pdf_converter` as a mitigation.

• CWE-78

• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-h3c9-cmh8-7qpjVendor Advisory
• https://github.com/nextcloud/server/commit/5a06b50b10cc9278bbe68bbf897a0c4aeb0c4e60Patch
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-h3c9-cmh8-7qpjVendor Advisory
• https://github.com/nextcloud/server/commit/5a06b50b10cc9278bbe68bbf897a0c4aeb0c4e60Patch

Published

Mar 30, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-26477XWiki Platform is a generic wiki platform. Starting in versi…9.8
• CVE-2023-26478XWiki Platform is a generic wiki platform. Starting in versi…8.1
• CVE-2023-26479XWiki Platform is a generic wiki platform. Starting in versi…6.5
• CVE-2023-2648A vulnerability was found in Weaver E-Office 9.5. It has bee…9.8
• CVE-2023-26480XWiki Platform is a generic wiki platform. Starting in versi…5.4
• CVE-2023-26481authentik is an open-source Identity Provider. Due to an ins…6.5
• CVE-2023-26483gosaml2 is a Pure Go implementation of SAML 2.0. SAML Servic…5.3
• CVE-2023-26484KubeVirt is a virtual machine management add-on for Kubernet…8.2
• CVE-2023-26485cmark-gfm is GitHub's fork of cmark, a CommonMark parsing an…7.5
• CVE-2023-26486Vega is a visualization grammar, a declarative format for cr…6.1
• CVE-2023-26487Vega is a visualization grammar, a declarative format for cr…6.1
• CVE-2023-26488OpenZeppelin Contracts is a library for secure smart contrac…6.5