Concept
CVE-2025-66208
An operating system command injection vulnerability in the Nextcloud richdocumentscode component that allows unauthenticated attackers to execute code remotely, affecting specific versions of Nextcloud instances.
Timeline (last 90 days)
Sep 14
CVE-2025-66208 is an operating system command injection vulnerability in richdocumentscode (the Collabora/CODE online document editing component) built into Nextcloud.
Unverified50%
Sep 14
The CVE advisory states that the vulnerability was fixed 10 months ago in Nextcloud version 25.4.703.
Unverified50%