CVE-2026-45159

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-45159", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-05-08T20:44:38.965Z", "datePublished": "2026-06-01T16:39:38.836Z", "dateUpdated": "2026-06-01T19:30:25.192Z"}, "containers": {"cna": {"title": "Nextcloud: Files drop share links for end-to-end encrypted folders allowed to drop files into other folders of the share owner", "problemTypes": [{"descriptions": [{"cweId": "CWE-639", "lang": "en", "description": "CWE-639: Authorization Bypass Through User-Controlled Key", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.5, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-p3qw-7gwx-wg24", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-p3qw-7gwx-wg24"}, {"name": "https://github.com/nextcloud/end_to_end_encryption/pull/1395", "tags": ["x_refsource_MISC"], "url": "https://github.com/nextcloud/end_to_end_encryption/pull/1395"}, {"name": "https://hackerone.com/reports/3304830", "tags": ["x_refsource_MISC"], "url": "https://hackerone.com/reports/3304830"}], "affected": [{"vendor": "nextcloud", "product": "security-advisories", "versions": [{"version": ">= 1.15.0, < 1.15.4", "status": "affected"}, {"version": ">= 1.16.0, < 1.16.3", "status": "affected"}, {"version": ">= 1.17.0, < 1.17.1", "status": "affected"}, {"version": ">= 1.18.0, < 1.18.1", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-06-01T16:39:38.836Z"}, "descriptions": [{"lang": "en", "value": "Nextcloud is an open source content collaboration platform. From versions 1.15.0 to before 1.15.4, 1.16.0 to before 1.16.3, 1.17.0 to before 1.17.1, and 1.18.0 to before 1.18.1, a malicious user with access to an end-to-end encrypted files drop link was able to also drop files into other end-to-end encrypted folders of the share owner. Reading and modifying of other files was not possible. This issue has been patched in versions 1.15.4, 1.16.3, 1.17.1, 1.18.1, and 2.0.0-rc.7."}], "source": {"advisory": "GHSA-p3qw-7gwx-wg24", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-06-01T19:30:14.088508Z", "id": "CVE-2026-45159", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-01T19:30:25.192Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-45159", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-01T19:30:14.088508Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-01T19:30:20.748Z"}}], "cna": {"title": "Nextcloud: Files drop share links for end-to-end encrypted folders allowed to drop files into other folders of the share owner", "source": {"advisory": "GHSA-p3qw-7gwx-wg24", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.5, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "nextcloud", "product": "security-advisories", "versions": [{"status": "affected", "version": ">= 1.15.0, < 1.15.4"}, {"status": "affected", "version": ">= 1.16.0, < 1.16.3"}, {"status": "affected", "version": ">= 1.17.0, < 1.17.1"}, {"status": "affected", "version": ">= 1.18.0, < 1.18.1"}]}], "references": [{"url": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-p3qw-7gwx-wg24", "name": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-p3qw-7gwx-wg24", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/nextcloud/end_to_end_encryption/pull/1395", "name": "https://github.com/nextcloud/end_to_end_encryption/pull/1395", "tags": ["x_refsource_MISC"]}, {"url": "https://hackerone.com/reports/3304830", "name": "https://hackerone.com/reports/3304830", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "Nextcloud is an open source content collaboration platform. From versions 1.15.0 to before 1.15.4, 1.16.0 to before 1.16.3, 1.17.0 to before 1.17.1, and 1.18.0 to before 1.18.1, a malicious user with access to an end-to-end encrypted files drop link was able to also drop files into other end-to-end encrypted folders of the share owner. Reading and modifying of other files was not possible. This issue has been patched in versions 1.15.4, 1.16.3, 1.17.1, 1.18.1, and 2.0.0-rc.7."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-639", "description": "CWE-639: Authorization Bypass Through User-Controlled Key"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-06-01T16:39:38.836Z"}}}, "cveMetadata": {"cveId": "CVE-2026-45159", "state": "PUBLISHED", "dateUpdated": "2026-06-01T19:30:25.192Z", "dateReserved": "2026-05-08T20:44:38.965Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-06-01T16:39:38.836Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "security-advisories", "vendor": "nextcloud", "versions": [{"status": "affected", "version": ">= 1.15.0, < 1.15.4"}, {"status": "affected", "version": ">= 1.16.0, < 1.16.3"}, {"status": "affected", "version": ">= 1.17.0, < 1.17.1"}, {"status": "affected", "version": ">= 1.18.0, < 1.18.1"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Nextcloud is an open source content collaboration platform. From versions 1.15.0 to before 1.15.4, 1.16.0 to before 1.16.3, 1.17.0 to before 1.17.1, and 1.18.0 to before 1.18.1, a malicious user with access to an end-to-end encrypted files drop link was able to also drop files into other end-to-end encrypted folders of the share owner. Reading and modifying of other files was not possible. This issue has been patched in versions 1.15.4, 1.16.3, 1.17.1, 1.18.1, and 2.0.0-rc.7."}, {"lang": "es", "value": "Nextcloud es una plataforma de colaboraci\u00f3n de contenido de c\u00f3digo abierto. Desde las versiones 1.15.0 hasta antes de la 1.15.4, de la 1.16.0 hasta antes de la 1.16.3, de la 1.17.0 hasta antes de la 1.17.1, y de la 1.18.0 hasta antes de la 1.18.1, un usuario malicioso con acceso a un enlace de carga de archivos cifrados de extremo a extremo pudo tambi\u00e9n cargar archivos en otras carpetas cifradas de extremo a extremo del propietario del recurso compartido. La lectura y modificaci\u00f3n de otros archivos no fue posible. Este problema ha sido parcheado en las versiones 1.15.4, 1.16.3, 1.17.1, 1.18.1 y 2.0.0-rc.7."}], "id": "CVE-2026-45159", "lastModified": "2026-07-22T07:10:00.107", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.5, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.1, "impactScore": 1.4, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-45159", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-06-01T19:30:14.088508Z", "version": "2.0.3"}}]}, "published": "2026-06-01T17:17:09.550", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/nextcloud/end_to_end_encryption/pull/1395"}, {"source": "security-advisories@github.com", "url": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-p3qw-7gwx-wg24"}, {"source": "security-advisories@github.com", "url": "https://hackerone.com/reports/3304830"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-639"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[1.15.0,1.15.4)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[1.16.0,1.16.3)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[1.17.0,1.17.1)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[1.18.0,1.18.1)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "security-advisories", "source": "cna", "vendor": "nextcloud"}, "product": "end_to_end_encryption", "vendor": "nextcloud"}], "created": "2026-06-01T18:45:34.649201+00:00", "updated": "2026-06-02T20:54:02.449791+00:00", "vendors": ["nextcloud", "nextcloud$PRODUCT$end_to_end_encryption"]}