nextcloud-mcp-server vulnerabilities (PyPI)

1 vulnerability.

• nextcloud-mcp-server PyPI Nextcloud MCP Server: Unauthenticated `POST /webhooks/nextcloud` allows arbitrary vector data deletion when `WEBHOOK_SECRET` is unset ( default ) CVE-2026-55640 Fix available 9.1 CriticalAugust 25, 2026