ownCloud is a file storage, synchronization, and sharing application. In ownCloud 10 prior to version 10.15.3, an attacker with administrative privileges can ex…

A path traversal vulnerability exists in ownCloud 10 prior to version 10.15.3 that allows an attacker with administrative privileges to execute arbitrary code on the system. The vulnerability affects ownCloud, a file storage, synchronization, and sharing application. Exploitation requires administrative access, which somewhat limits the attack surface but still poses significant risk in environments with multiple administrators or compromised admin accounts. The issue has been patched in ownCloud 10 version 10.15.3. Users are advised to upgrade immediately to mitigate the risk. The vulnerability is tracked as CVE-2025-53829 and has been published on NVD as well as GitHub Security Advisories.