Nextcloud Files App PIN Bypass Vulnerability on Android

A vulnerability in the Nextcloud Files app for Android, versions 33.0.0 prior to 33.1.0, allows users to bypass the app's PIN code lock. After unlocking a locked Android phone, the back button could be used to navigate past the PIN prompt, potentially exposing sensitive files or information.

Impact

Exploiting this vulnerability allows for unauthorized access to the Nextcloud Files app, bypassing the PIN lock and potentially leading to exposure of sensitive files or information.

Remediation

Users are advised to update the Nextcloud Android Files app to version 33.1.0, where this vulnerability has been patched.