Medium severity6.5OSV Advisory· Published Oct 16, 2025· Updated Apr 15, 2026

CVE-2025-58051

Description

Nextcloud Tables allows you to create your own tables with individual columns. Prior 0.7.6, 0.8.8, and 0.9.5, when importing a table, a user was able to specify files on the server and when their format is supported by the used PhpSpreadsheet library they would be included and their content leaked to the user. It is recommended that the Nextcloud Tables app is upgraded to 0.7.6, 0.8.8 or 0.9.5.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Nextcloud/TablesOSV2 versions
v0.7.0, v0.7.1, v0.7.2, …+ 1 more
- (no CPE)range: v0.7.0, v0.7.1, v0.7.2, …
- (no CPE)range: <0.7.6

Patches

Vulnerability mechanics

References

github.com/nextcloud/security-advisories/security/advisories/GHSA-wpp5-4w35-pxq6nvd
github.com/nextcloud/tables/pull/1936nvd
hackerone.com/reports/3249624nvd

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000