What is the CVSS score of CVE-2026-45544?

CVE-2026-45544 has a CVSS 3.1 base score of 4.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.0%.

Is there a patch available for CVE-2026-45544?

Yes, a patch is available for CVE-2026-45544. Update the affected software to the latest version immediately.

Nextcloud Tables CVE-2026-45544

EUVD-2026-33714 MEDIUM

Exposure of Sensitive Information Through Metadata (CWE-1230)

2026-06-01 GitHub_M

Information Disclosure Nextcloud Security Advisories

4.3

CVSS 3.1 · Vendor: GitHub_M

Severity by source

Vendor (GitHub_M) PRIMARY

4.3 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Primary rating from Vendor (GitHub_M) · only source for this CVE.

CVSS VectorVendor: GitHub_M

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

Patch available

Jun 01, 2026 - 20:02 EUVD

Source Code Evidence Fetched

Jun 01, 2026 - 19:30 vuln.today

Analysis Generated

Jun 01, 2026 - 19:30 vuln.today

DescriptionCVE.org

Nextcloud is an open source content collaboration platform. From version 0.8.0 to before version 1.0.4, the view filter criteria is exposed to users with read-only permissions in Nextcloud Tables. This issue has been patched in versions 1.0.4 and 2.0.0.

AnalysisAI

Nextcloud Tables versions 0.8.0 through 1.0.3 improperly disclose view filter criteria to authenticated users holding only read-only permissions on a shared view. The flaw in ViewService.php attempted to sanitize filter arrays for low-privileged users but instead exposed the full filter rules - potentially revealing sensitive column names, threshold values, or data organization logic the view owner intended to keep confidential. No public exploit code has been identified at time of analysis, and this CVE is not listed in CISA KEV, indicating no confirmed active exploitation.

Technical ContextAI

Nextcloud Tables is a self-hosted spreadsheet and database application built on the Nextcloud collaboration platform. The vulnerability resides in lib/Service/ViewService.php within the enhanceView() method, which is responsible for preparing view objects before delivery to the requesting user. For read-only users, the original code attempted to strip filter details by mapping over the raw filter array - intending to signal only the presence of a filter while hiding its specifics - but this partial sanitization failed to actually redact the filter criteria. CWE-1230 (Exposure of Sensitive Information Through Metadata) precisely describes this root cause: the filter rules, which are metadata governing which rows are visible and how data is sorted, leaked to unprivileged users. The fix in PR #2312 replaces the flawed map-based sanitization with an unconditional $view->setFilterArray([]) call, completely clearing filter data for unauthorized users rather than attempting a selective redaction.

RemediationAI

Upgrade Nextcloud Tables to version 1.0.4 or 2.0.0, both of which are confirmed patched releases per the vendor advisory at https://github.com/nextcloud/security-advisories/security/advisories/GHSA-vvxm-6jjp-m9mp. The underlying fix is delivered through merged pull request #2312 (https://github.com/nextcloud/tables/pull/2312). If an immediate upgrade cannot be applied, a viable compensating control is to restrict view sharing to fully-trusted users only - removing read-only access grants for partially-trusted accounts until the patch is deployed. This workaround eliminates the exploitation prerequisite (low-privileged read access) but may disrupt legitimate collaboration workflows for users relying on shared view access.