🎯 New Report #3572848: Group restriction bypass via bearer token in user oidc (SETTING RESTRICT LOGIN TO GROUPS not enforced in Backend::getCurrentUserId)
🔺Severity: Medium
👽 Reporter: msatz
⭐️ Reputation: 109
🛠 State: resolved
💼 Team: Nextcloud
💵 Bounty: null
🕐 Submitted: 2026-02-25
⏰ Disclosed: 2026-05-21 22:12:59
📝 Summary: A security inconsistency was identified in the user oidc app where group-based login restrictions were enforced in the browser OIDC flow but not in bearer token validation. This could have allowed users outside whitelisted groups to access the Nextcloud API with a valid bearer token.
📂 Report JSON File: 3572848
@hackeronereports