Bypassing lock protection exists in Nextcloud Android app 3.6.0 when creating a multi-account and aborting the process.
- https://hackerone.com/reports/490946
No PoCs found on GitHub currently.