Nextcloud: Code injection allows unprivileged local attacker to execute arbitrary code in Nextcloud's OAuth/web renderer process

A code injection vulnerability was discovered in Nextcloud Desktop Client version 33.0.5 for macOS. The vulnerability combined two weaknesses: the QtWebEngineProcess binary was shipped with library validation disabled, and it contained dead build-server paths in its rpath that were searched befor...