Low severity3.8NVD Advisory· Published Jun 14, 2024· Updated Jun 17, 2026

CVE-2024-37885

Description

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. A code injection in Nextcloud Desktop Client for macOS allowed to load arbitrary code when starting the client with DYLD_INSERT_LIBRARIES set in the enviroment. It is recommended that the Nextcloud Desktop client is upgraded to 3.12.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Nextcloud/desktop
cpe:2.3:a:nextcloud:desktop:*:*:*:*:*:*:*:*
Range: <3.12.0
Nextcloud/Nextcloud Desktop Clientllm-fuzzy
Range: before 3.12.0
Nextcloud/security-advisoriescpe-rescue
Range: < 3.12.0

Patches

Vulnerability mechanics

References

github.com/nextcloud/desktop/pull/6378nvdPatch
github.com/nextcloud/security-advisories/security/advisories/GHSA-4mf7-v63m-99p7nvdPatchThird Party Advisory
hackerone.com/reports/2307625nvdIssue Tracking

News mentions

No linked articles in our index yet.

cvss	0.247
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000