Medium severity4.3NVD Advisory· Published Dec 5, 2025· Updated Jun 17, 2026

CVE-2025-66513

Description

Nextcloud Tables allows you to create your own tables with individual columns. Prior to 0.8.9, 0.9.6, and 1.0.1, the information which table (numeric ID) is shared with which groups or users and the respective permissions was not limited to privileged users. This vulnerability is fixed in 0.8.9, 0.9.6, and 1.0.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Nextcloud/Tablesllm-fuzzy2 versions
<0.8.9, <0.9.6, <1.0.1+ 1 more
- (no CPE)range: <0.8.9, <0.9.6, <1.0.1
- cpe:2.3:a:nextcloud:tables:*:*:*:*:*:nextcloud:*:*range: >=0.6.0,<0.8.9
Nextcloud/security-advisoriescpe-rescue
Range: >= 1.0.0-beta.1, < 1.0.1

Patches

Vulnerability mechanics

References

github.com/nextcloud/security-advisories/security/advisories/GHSA-2cwj-qp49-4xfwnvdPatchVendor Advisory
github.com/nextcloud/tables/commit/b92b9560b1e70a02b103a7aeb9e22e2ab5231873nvdPatch
github.com/nextcloud/tables/pull/2148nvdIssue TrackingPatch
hackerone.com/reports/3334165nvdIssue TrackingVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000