Medium severity6.3NVD Advisory· Published Dec 5, 2025· Updated Jun 17, 2026

CVE-2025-66551

Description

Nextcloud Tables allows you to create your own tables with individual columns. Prior to 0.8.6 and 0.9.3, a malicious user was able to create their own table and then move a column to a victims table. This vulnerability is fixed in 0.8.6 and 0.9.3.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Nextcloud/Tables2 versions
cpe:2.3:a:nextcloud:tables:*:*:*:*:*:nextcloud:*:*+ 1 more
- cpe:2.3:a:nextcloud:tables:*:*:*:*:*:nextcloud:*:*range: >=0.4.0,<0.8.6
- (no CPE)range: <0.8.6, <0.9.3
Nextcloud/security-advisoriescpe-rescue
Range: >= 0.9.0-beta.1, < 0.9.3

Patches

Vulnerability mechanics

References

github.com/nextcloud/tables/commit/39f24a62fb41fd7a8bda65325f8bbafdc91c731cnvdPatch
github.com/nextcloud/tables/pull/1810nvdIssue TrackingPatch
github.com/nextcloud/security-advisories/security/advisories/GHSA-w787-vwqp-8wr7nvdVendor Advisory
hackerone.com/reports/3137895nvdIssue TrackingVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.410
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000