Nextcloud v32.0.14 released on 13-08-2026
Nextcloud v32.0.14 is out now. It brings security hardening — patches for privilege escalation and web‑UI injection vectors, tightened CSRF/XSS protections in sharing and settings, safer file‑handling sanitisation, and updated dependency constraints.
See the release on the project’s GitHub for full notes, downloads and guidance for administrators.
What’s in this release
- Security fixes and hardening: multiple privilege escalation and web‑UI injection patches, tightened CSRF/XSS protections, safer file‑handling sanitisation and updated dependency constraints to remove vulnerable packages.
- Core bug fixes and stability improvements: fixes for file locking and cache consistency, more reliable background job processing and cron runs, corrected behaviour for public shares and password resets, and various crash/exception fixes.
- Performance, storage and database updates: database query optimisations, fixes for external storage backends (SMB/FTP/S3), improved Redis and memcache interaction to avoid cache corruption, and SQL migration adjustments for MySQL/MariaDB/Postgres compatibility.
Upgrade notes
- Administrators should upgrade promptly; after updating check apps, background jobs and logs for compatibility and follow any repair steps mentioned in the release notes.
- If you cannot update immediately, follow the mitigation steps listed in the release notes and restrict access where the vulnerable vectors apply until you can patch.
Share your experience with the upgrade on the release page or in the community — reports of any issues or unexpected behaviour help others and inform follow‑up fixes.
