{"id":"CVE-2025-66551","aliases":["EUVD-2025-201440","GHSA-w787-vwqp-8wr7"],"status":"published","title":"Nextcloud Tables is missing an ownership check which allows moving columns into tables of other users","description":"Nextcloud Tables allows you to create your own tables with individual columns. Prior to 0.8.6 and 0.9.3, a malicious user was able to create their own table and then move a column to a victims table. This vulnerability is fixed in 0.8.6 and 0.9.3.","severity":{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00272,"percentile":0.19738,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-639"],"published":"2025-12-05T17:15:16Z","modified":"2026-10-28T02:30:24Z","products":[{"vendor":"kiteworks","product":"security-advisories"},{"vendor":"nextcloud","product":"security-advisories"},{"vendor":"nextcloud","product":"tables"}],"references":[{"url":"https://github.com/nextcloud/security-advisories/security/advisories/GHSA-w787-vwqp-8wr7","tags":["x_refsource_CONFIRM","Vendor Advisory","advisory"]},{"url":"https://github.com/nextcloud/tables/pull/1810","tags":["x_refsource_MISC","Issue Tracking","Patch","fix"]},{"url":"https://github.com/nextcloud/tables/commit/39f24a62fb41fd7a8bda65325f8bbafdc91c731c","tags":["x_refsource_MISC","Patch","fix"]},{"url":"https://hackerone.com/reports/3137895","tags":["x_refsource_MISC","Issue Tracking","Vendor Advisory","web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/66xxx/CVE-2025-66551.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66551","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-66551","title":"Nextcloud Tables is missing an ownership check which allows moving columns into tables of other users","description":"Nextcloud Tables allows you to create your own tables with individual columns. Prior to 0.8.6 and 0.9.3, a malicious user was able to create their own table and then move a column to a victims table. This vulnerability is fixed in 0.8.6 and 0.9.3.","status":"published","published":"2025-12-05T17:15:16.927Z","modified":"2025-12-09T20:09:26.339Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-639"],"updated_at":"2026-11-02T14:32:53.157279Z"}],"euvd":[{"id":"EUVD-2025-201440","description":"Nextcloud Tables allows you to create your own tables with individual columns. Prior to 0.8.6 and 0.9.3, a malicious user was able to create their own table and then move a column to a victims table. This vulnerability is fixed in 0.8.6 and 0.9.3.","status":"published","published":"2025-12-05T17:15:16Z","modified":"2025-12-09T20:09:26Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L","level":"medium"}],"updated_at":"2026-11-02T19:49:08.049254Z"}],"nvd":[{"id":"CVE-2025-66551","description":"Nextcloud Tables allows you to create your own tables with individual columns. Prior to 0.8.6 and 0.9.3, a malicious user was able to create their own table and then move a column to a victims table. This vulnerability is fixed in 0.8.6 and 0.9.3.","status":"published","published":"2025-12-05T18:15:58.3Z","modified":"2026-09-25T23:10:00.463Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-639"],"updated_at":"2026-11-02T14:11:49.093461Z"}],"osv":[{"id":"CVE-2025-66551","title":"Nextcloud Tables is missing an ownership check which allows moving columns into tables of other users","description":"Nextcloud Tables allows you to create your own tables with individual columns. Prior to 0.8.6 and 0.9.3, a malicious user was able to create their own table and then move a column to a victims table. This vulnerability is fixed in 0.8.6 and 0.9.3.","status":"published","published":"2025-12-05T17:15:16.927Z","modified":"2026-10-28T02:30:24.53152442Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L","level":"medium"}],"cwes":["CWE-639"],"updated_at":"2026-11-02T15:44:52.202386Z"}]}}