Is Nextcloud Server 32.0.2 affected?
Nov 20, 2025 · Release notes ↗
8 known vulnerabilities affect 32.0.2 (highest CVSS 8.1).
Your branch 32 has reached end of life (Sep 30, 2026).
33 newer releases in its track, up to 35.0.2. What changed up to 35.0.2
Vulnerabilities affecting 32.0.2
- 8.1 CVE-2026-45281 Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, with the knowledge of other users’ principal URL… fixed in 32.0.9
- 6.8 CVE-2026-45810 Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 31.0.0 to before 31.0.12, and 32.0.0 to before 32.0.3, a missing check of a relation allowed authentica… fixed in 32.0.3
- 6.5 CVE-2026-45282 Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, an authenticated attacker can access attachments… fixed in 32.0.9
- 6.4 CVE-2026-45285 Nextcloud is an open source content collaboration platform. From versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, when a user shares a folder or file with a Nextcloud Team that includ… fixed in 32.0.9
- 5.9 CVE-2026-45690 Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, an authentication bypass vulnerability allowed at… fixed in 32.0.9
- 5.9 CVE-2026-45691 Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, a pre-2FA session cookie (created after successfu… fixed in 32.0.9
- 5.4 CVE-2025-66512 Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Server Enterprise prior to 31.0.12 and 32.0.3, a missing sanitization allowed malicious users to circumvent the cont… fixed in 32.0.3
- 4.4 CVE-2026-45279 Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 31.0.0 to before 31.0.14, and 32.0.0 to before 32.0.4, if {lang} is used in the template directory conf… fixed in 32.0.4
Newer releases
| 35.0.2 | Oct 15, 2026 | 32.0.2 → 35.0.2 |
| 35.0.1 | Sep 24, 2026 | 32.0.2 → 35.0.1 |
| 35.0.0 | Sep 15, 2026 | 32.0.2 → 35.0.0 |
| 34.0.5 | Oct 15, 2026 | 32.0.2 → 34.0.5 |
| 34.0.4 | Sep 10, 2026 | 32.0.2 → 34.0.4 |
| 34.0.3 | Aug 13, 2026 | 32.0.2 → 34.0.3 |
| 34.0.2 | Jul 23, 2026 | 32.0.2 → 34.0.2 |
| 34.0.1 | Jun 25, 2026 | 32.0.2 → 34.0.1 |
| 34.0.0 | Jun 8, 2026 | 32.0.2 → 34.0.0 |
| 33.0.10 | Oct 15, 2026 | 32.0.2 → 33.0.10 |
| 33.0.9 | Sep 10, 2026 | 32.0.2 → 33.0.9 |
| 33.0.8 | Aug 13, 2026 | 32.0.2 → 33.0.8 |
| 33.0.7 | Jul 23, 2026 | 32.0.2 → 33.0.7 |
| 33.0.6 | Jun 25, 2026 | 32.0.2 → 33.0.6 |
| 33.0.5 | Jun 2, 2026 | 32.0.2 → 33.0.5 |