cbcvebase.

Cbcoutinho Nextcloud-Mcp-Server vulnerabilities

1 known vulnerability affecting cbcoutinho/nextcloud-mcp-server.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2026-55640P2CRITICALCVSS 9.1fixed in 0.117.22026-08-25
CVE-2026-55640 [CRITICAL] CWE-306 CVE-2026-55640: Nextcloud MCP Server is a production-ready MCP server that connects AI assistants to a Nextcloud ins Nextcloud MCP Server is a production-ready MCP server that connects AI assistants to a Nextcloud instance. Prior to 0.117.2, the POST /webhooks/nextcloud endpoint in nextcloud_mcp_server/vector/webhook_receiver.py has no authentication by default because WEBHOOK_SECRET defaults to None and startup validation does not require it. When WEBHOOK_SECRE
ghsanvd
Cbcoutinho Nextcloud-Mcp-Server vulnerabilities | cvebase