🎯 New Report #3696266: Path Traversal in Nextcloud Talk Android Exposes User Credentials and Private Data via FileProvider
🔺Severity: Medium
👽 Reporter: mirachael
⭐️ Reputation: 107
🛠 State: resolved
💼 Team: Nextcloud
💵 Bounty: null
🕐 Submitted: 2026-04-26
⏰ Disclosed: 2026-08-24 01:23:22
📝 Summary: A vulnerability in Nextcloud Talk Android allowed an external Android app to write and retrieve config files by pinging an internal endpoint.
📂 Report JSON File: 3696266
@hackeronereports