CVE-2026-45544
Analyzed Analyzed - Analysis Complete
Exposed View Filter Criteria in Nextcloud Tables

Publication date: 2026-06-01

Last updated on: 2026-06-04

Assigner: GitHub, Inc.

Description
Nextcloud is an open source content collaboration platform. From version 0.8.0 to before version 1.0.4, the view filter criteria is exposed to users with read-only permissions in Nextcloud Tables. This issue has been patched in versions 1.0.4 and 2.0.0.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-06-01
Last Modified
2026-06-04
Generated
2026-06-22
AI Q&A
2026-06-01
EPSS Evaluated
2026-06-21
NVD
CVE-2026-45544
EUVD
EUVD-2026-33714
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
nextcloud tables From 0.8.0 (inc) to 1.0.4 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-1230 The product prevents direct access to a resource containing sensitive information, but it does not sufficiently limit access to metadata that is derived from the original, sensitive information.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Compliance Impact

This vulnerability involves information disclosure where users with read-only permissions can access view filter metadata that should be hidden. Exposure of sensitive information, even metadata, can potentially impact compliance with data protection regulations such as GDPR and HIPAA, which require protection of sensitive data and minimization of unauthorized data access.

However, the provided information does not explicitly describe the direct impact on compliance with these standards or any regulatory consequences.

Executive Summary

CVE-2026-45544 is an information disclosure vulnerability in the Nextcloud Tables app. It occurs because the view filter criteria, which should be hidden, are exposed to users who only have read-only permissions. This means that sensitive metadata related to view filters can be accessed by unauthorized users.

The issue affects versions of the Tables app from 0.8.0 up to but not including 1.0.4 and 2.0.0, where it has been patched.

Impact Analysis

This vulnerability can lead to unauthorized disclosure of sensitive information through metadata exposure. Users with only read-only access can view filter criteria that should be hidden, potentially revealing internal data structures or sensitive filtering logic.

While it does not allow modification or deletion of data, the exposure of sensitive metadata could aid attackers in understanding the system better or in planning further attacks.

Mitigation Strategies

The recommended immediate step to mitigate this vulnerability is to upgrade the Nextcloud Tables app to version 1.0.4 or 2.0.0, where the issue has been patched.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-45544. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart