cvedb.io
CVE-2025-47792
MEDIUM · CVSS 5
EPSS exploitation probability: 0%
Published 2025-05-16T15:15:47.923 · Last modified 2026-06-17T09:28:42.100

Summary

Nextcloud Desktop is the desktop sync client for Nextcloud. In versions of Nextcloud Desktop prior to 3.15, 3rdparty applications already installed on a user machine can create link shares for almost all data via the socket API. These shares can then be easily sent off to an external service. Nextcloud Desktop fixes the issue in version 3.15. No known workarounds are available.

Affected products

nextcloud — desktop

Does this affect you?

Add your gear to cvedb and we'll alert you only when nextcloud ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.