Nextcloud · Report #3040887
Users can modify tags on files that do not belong to them
Validstatus
mediumseverity
$150bounty
20upvotes
4 Jan 2026disclosed
Summary
Security advisory in https://github.com/nextcloud/security-advisories/security/advisories/GHSA-hq6c-r898-fgf2
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.