Nextcloud is what you run when you can't afford, or don't trust, the big cloud. Schools run it. Nonprofits run it. Ten-person firms run it on a box in the closet so their files stay theirs. And since September 10, some of those boxes have been quietly backdoored through the office suite that ships with them. The flaw is CVE-2026-110447, an unauthenticated command injection in Collabora's "Built-in CODE Server" app for Nextcloud (the app ID is richdocumentscode). Collabora rat