CVE-2024-46958

CRITICAL
Published Sep 16, 2024 Modified Mar 13, 2025

Description

In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files (between the server and client) may become world writable or world readable. This is fixed in 3.13.4.

Is your site exposed to CVE-2024-46958?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

9.1
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected Products

Vendor Product
nextcloud desktop
linux linux_kernel

References

Frequently Asked Questions

What is CVE-2024-46958? +
In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files (between the server and client) may become world writable or world readable. This is fixed in 3.13.4. It has a CVSS v3.1 base score of 9.1 (CRITICAL).
How severe is CVE-2024-46958? +
CVE-2024-46958 has a CVSS v3.1 score of 9.1 out of 10, rated CRITICAL. This is a critical vulnerability that should be patched immediately.
What products are affected by CVE-2024-46958? +
CVE-2024-46958 affects products from linux, nextcloud, specifically: desktop, linux_kernel. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2024-46958? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2024-30247 10.0

NextcloudPi is a ready to use image for Virtual Machines, Raspberry Pi, Odroid HC1, Rock64 and other boards. A command …
CVE-2024-22212 9.6

Nextcloud Global Site Selector is a tool which allows you to run multiple small Nextcloud instances and redirect users to …
CVE-2024-52508 8.2

Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. When a user is trying to set up …
CVE-2026-45545 8.2

Nextcloud is an open source content collaboration platform. From versions 0.7.0 to before 0.7.7, 0.8.0 to before 0.8.10, 0.9.0 to …
CVE-2024-37882 8.1

Nextcloud Server is a self hosted personal cloud system. A recipient of a share with read&share permissions could reshare the …
CVE-2026-45281 8.1

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, and 33.0.0 to …

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2024-46958 — free, no signup required.