Nextcloud · Report #3696266

Path Traversal in Nextcloud Talk Android Exposes User Credentials and Private Data via FileProvider

Validstatus

mediumseverity

18upvotes

24 Aug 2026disclosed

Summary

An external Android app was able to ping an internal endpoint to write and retrieve config files

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original