CVE-2025-47794: Nextcloud Server vulnerable to insecure temporary file creation, race with write access and permission
Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server prior to 29.0.13, 30.0.7, and 31.0.1 and Nextcloud Enterprise Server prior to 26.0.13.13, 27.1.11.13, 28.0.14.4, 29.0.13, 30.0.7, and 31.0.1, an attacker on a multi-user system may read temporary files from Nextcloud running with a different user account, or run a symlink attack. Nextcloud Server versions 29.0.13, 30.0.7, and 31.0.1 and Nextcloud Enterprise Server 26.0.13.13, 27.1.11.13, 28.0.14.4, 29.0.13, 30.0.7, and 31.0.1 fix the issue. No known workarounds are available.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-47794?
CVE-2025-47794 is classified as a medium severity vulnerability due to its potential to allow attackers to access sensitive temporary files.
How do I fix CVE-2025-47794?
To fix CVE-2025-47794, upgrade to Nextcloud Server versions 29.0.13, 30.0.7, or 31.0.1, or Nextcloud Enterprise Server versions 26.0.13.13, 27.1.11.13, 28.0.14.4, 29.0.13, 30.0.7, or 31.0.1.
Who is affected by CVE-2025-47794?
CVE-2025-47794 affects users of Nextcloud Server and Nextcloud Enterprise Server prior to the specified versions.
What type of attack does CVE-2025-47794 enable?
CVE-2025-47794 may allow an attacker on a multi-user system to read temporary files, which can lead to data leakage.
When was CVE-2025-47794 disclosed?
CVE-2025-47794 was disclosed in relation to vulnerabilities in Nextcloud up to August 2023.