CVE-2025-66547

Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Enterprise Server prior to 31.0.1, non-privileged users can modify tags on files they should not have access to via bulk tagging. This vulnerability is fixed in 31.0.1.

• CWE-639

• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-hq6c-r898-fgf2Patch, Vendor Advisory
• https://github.com/nextcloud/server/commit/b44f1568f2dc97c746281d99e2342ad679e3d8a9Patch
• https://github.com/nextcloud/server/issues/51247Issue Tracking
• https://github.com/nextcloud/server/pull/51288Issue Tracking
• https://hackerone.com/reports/3040887Permissions Required, Vendor Advisory

Published

Dec 5, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-66541Rejected reason: Not used
• CVE-2025-66542Rejected reason: Not used
• CVE-2025-66543Rejected reason: Not used
• CVE-2025-66544Rejected reason: Not used
• CVE-2025-66545Nextcloud Groupfolders provides admin-configured folders sha…4.3
• CVE-2025-66546Nextcloud Calendar is a calendar app for Nextcloud. Prior to…3.3
• CVE-2025-66548Nextcloud Deck is a kanban style organization tool aimed at …5.5
• CVE-2025-66549Nextcloud Desktop is the desktop sync client for Nextcloud. …2.7
• CVE-2025-6655PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Infor…3.3
• CVE-2025-66550Nextcloud Calendar is a calendar app for Nextcloud. Prior to…5.7
• CVE-2025-66551Nextcloud Tables allows you to create your own tables with i…4.3
• CVE-2025-66552Nextcloud Server is a self hosted personal cloud system. In …4.3