CVE-2026-67400
Richdocuments: A missing token type check allowed to retrieve more additional information about the WOPI configuration with a user or guest token.
Nextcloud RichdocumentsApplications & CMS
CVSS
3.5LowExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed inNone listedNo source names a fixed version yet
What fixes it
No source in this snapshot names a fixed version.
Description
A missing token type check allowed to retrieve more additional information about the WOPI configuration with a user or guest token.
Text from CVE List
Affected versions 1
- Richdocumentsaffected: 11.0.0 through 11.0.0CVE List