Description
Nextcloud talk is a video & audio conferencing app for Nextcloud. Prior to 20.1.8 and 21.1.2, a participant with chat permissions was able to delete poll drafts of other participants within the conversation based on their numeric ID. This vulnerability is fixed in 20.1.8 and 21.1.2.
Affected products
nextcloud: talk
References4
- github.com/nextcloud/security-advisories/security/advisories/GH… PatchVendor Advisory
- hackerone.com/reports/3247386 Issue TrackingVendor Advisory
- github.com/nextcloud/spreed/commit/bd68e80d1dea98d84c1d621c2c68… Patch
- github.com/nextcloud/spreed/pull/15532 Issue TrackingPatch
Metrics
- CVSS 3.1
-
4.3
MEDIUM
Score source: NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - EPSS — exploit probability
- 0% percentile: 20 · as of 11 November 2026
- CWE
- CWE-639
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.