CVE-2021-32658: Nextcloud

Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days.

Nextcloud Android is the Android client for the Nextcloud open source home cloud system. Due to a timeout issue the Android client may not properly clean all sensitive data on account removal. This could include sensitive key material such as the End-to-End encryption keys. It is recommended that the Nextcloud Android App is upgraded to 3.16.1

Affected products

• Nextcloud Nextcloud: before 3.16.1 (fixed in 3.16.1)

Published 2021-06-08. Last modified 2026-06-17.