description: A code injection in Nextcloud Desktop Client 2.6.2 for macOS allowed to load arbitrary code when starting the client with DYLD_INSERT_LIBRARIES set in the environment.
problem types: Code Injection (CWE-94)
affected:
{
product: Desktop Client
vendor: n/a
versions:
status: affected, version: Fixed in 2.6.3
}