CVE-2020-8140: Nextcloud Desktop

Medium severity, CVSS 6.7. EPSS: 0.7% chance of exploitation in the next 30 days.

A code injection in Nextcloud Desktop Client 2.6.2 for macOS allowed to load arbitrary code when starting the client with DYLD_INSERT_LIBRARIES set in the environment.

Affected products

• Nextcloud Desktop: before 2.6.3 (fixed in 2.6.3)

Published 2020-03-20. Last modified 2026-06-17.