Login Request a demo
AP
Product
Approval
by Nextcloud · last CVE Sep 18, 2026
4
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 0Medium 2Low 2
Severity
All severities4Critical0High0Medium2Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Approval to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-45275
6.5
0%
Jun 1
Nextcloud: Authorization bypass in approval feature allows unauthorized file sharing with approvers
Affected: before 2.7.2
CVE-2026-82982
4.3
0%
Sep 18
The Approval app's approve/reject endpoint is meant to require the file's current etag as a freshness check, preventing an approver from approving or rejecting a file whose…
Affected: 1.0.0 through 3.0.0
CVE-2026-45277
3.3
0%
Jun 1
Nextcloud: Information disclosure in Nextcloud Approval app via fileId parameter reveals workflow associations
Affected: before 2.7.2
CVE-2025-66515
2.7
0%
Dec 5
The Nextcloud Approval app allows approval or disapproval of files in the sidebar
Affected: 1.0.0 before 1.3.1; 2.0.0 before 2.5.0
Showing 4