Group restriction bypass via bearer token in user_oidc (SETTING_RESTRICT_LOGIN_TO_GROUPS not enforced in Backend::getCurrentUserId)msatzHackerOne Hacktivity·Published Sep 18, 2026, 02:44 PMBy msatz to Nextcloud | Resolved | Medium | $150Read original↗Share this articleShareWhatsAppTelegramXCopyLinkedInFacebookEmail