[BUG] Memory Leak and High CPU due to infinite request loop for app.svg

[GengarTV]

⚠️ Before submitting, please verify the following: ⚠️

• This is a bug, not a question or a configuration issue.
• This issue is not already reported on Github (I've searched it).
• Nextcloud Server and Desktop Client are up to date. See Server Maintenance and Release Schedule and Desktop Releases for supported versions.
• I agree to follow Nextcloud's Code of Conduct

Bug description

Actual behavior
The client enters an infinite loop, requesting cookbook/img/app.svg dozens of times per second. This causes:

• Memory Usage: ~2.0 GB (RAM usage continues to climb over time).
• CPU Usage: ~25% - 30% (constant load on a single core).
• Log Flooding: The client log is rapidly filled with hundreds of duplicate requests.

Client configuration

• Client version: Nextcloud-4.0.8-x86_64 (AppImage)
• Operating system: Linux (Running under Wayland/KDE Plasma)
• OS language: Norwegian (nb)
• Installation path of client: /home/gengartv/Applications/Nextcloud-4.0.8-x86_64...AppImage

Note to developers: This loop appears to be related to the webflowcredentials.cpp or accessmanager.cpp logic when handling specific SVG assets from custom apps.

Steps to reproduce

1. Have the Cookbook app installed and enabled on the Nextcloud server.
2. Run the Nextcloud Desktop Client (AppImage version 4.0.8).
3. Monitor system resources and client logs.

Expected behavior

Expected behavior
The Nextcloud client should fetch application icons (like the Cookbook app icon) once or periodically, not in a tight, rapid-fire loop.

Which files are affected by this bug

Nextcloud client log file

Operating system

Linux

Which version of the operating system you are running.

KDE Neon

Package

Official Linux AppImage

Nextcloud Server version

v2.3.9

Nextcloud Desktop Client version

4.0.8-x86_64

Is this bug present after an update or on a fresh install?

Updated from a minor version (ex. 3.16.1 to 3.16.2)

Are you using the Nextcloud Server Encryption module?

Encryption is Disabled

Are you using an external user-backend?

• Default internal user-backend
• LDAP/ Active Directory
• SSO - SAML
• Other

Nextcloud Server logs

Logs
  The following log snippet shows the rapid repetition of requests for the Cookbook SVG icon:

   1 2026-03-27 22:19:59:552 [ info nextcloud.sync.accessmanager ]:      2 "" "https://[REDACTED_SERVER]/custom_apps/cookbook/img/app.svg" has X-Request-ID "5607303b-a4a2-4fa8-8cc5-c5164625b312"
   2 2026-03-27 22:19:59:566 [ info nextcloud.sync.credentials.webflow ]:        request finished QUrl("https://[REDACTED_SERVER]/custom_apps/cookbook/img/app.svg") with request id
     "5607303b-a4a2-4fa8-8cc5-c5164625b312"
   3 2026-03-27 22:19:59:566 [ info nextcloud.sync.credentials.webflow ]:        request finished QUrl("https://[REDACTED_SERVER]/custom_apps/cookbook/img/app.svg") with request id
     "836909b5-e48d-4fd3-b3cd-5eb503162d85"
   4 2026-03-27 22:19:59:568 [ info nextcloud.sync.accessmanager ]:      2 "" "https://[REDACTED_SERVER]/custom_apps/cookbook/img/app.svg" has X-Request-ID "02ba8b65-4880-44a1-a15d-d75ab5a22405"
   5 ... [Repeated hundreds of times per minute] ...

  ---

Additional info

Please note that this is my first time reporting a bug. I used gemini-CLI to diagnose why nextcloud is running away with my RAM

After killing nextcloud:

[gideao025]

Environment

OS: Windows 10/11 x64
RAM: 32 GB
Nextcloud Desktop Client: latest version (fresh install)
Setup: Connected to existing Nextcloud server (homelab)

Issue Description

The Nextcloud desktop client appears to have a severe memory leak related to virtual memory (commit size), eventually making the system unstable.

After a clean installation and minimal configuration (no heavy sync, only basic folder setup), the process nextcloud.exe starts increasing its commit size continuously.

Observed behavior:

Commit size grows rapidly (tens of GB)
Reached ~88 GB commit on a 32 GB RAM system
Actual RAM usage remains low (~2–3 GB)
System becomes unstable / freezes due to commit exhaustion

Steps to Reproduce

Install latest Nextcloud Desktop Client on Windows
Perform a clean setup (no previous config)
Configure a basic sync (even minimal / remote-only setup)
Open Task Manager → Details → enable "Commit size"
Observe nextcloud.exe

Expected Behavior

Stable memory usage
Commit size should remain bounded and proportional to workload

Actual Behavior

Continuous growth in commit size without release
No corresponding increase in real memory usage
Eventually leads to system instability

Temporary Workaround

Killing nextcloud.exe immediately frees the committed memory
Issue reappears after restarting the client

Additional Notes

This happens even without large sync workloads
Appears consistent with a potential infinite loop or retry mechanism
Reproducible after clean reinstall (config/cache wiped)

Let me know if additional logs or diagnostics are needed.

[GengarTV]

This issue HAS been reported on Windows. I'm keeping this here if you guys need the info. This might bring some to the table that the other one did not.

If this is spam, I'll delete this report asap

Thank you Nextcloud for all your hard work

[LLabmik]

I saw the same, Windows 11. I have 128 GB RAM and it ate almost all of it before I killed it.

[skisbit]

Started experiencing the exact same as @gideao025 according to Event Viewer and crash reports, same amount of RAM.

[andmpel]

Same here windows 11. I was gaming and my PC would freeze and shut down when the Nextcloud client was open for too long.

[Mike710Shine]

Same here on CachyOS. The OS was stuttering and kill the app because of to much memory use. When the App is started you can look into mission-center how the use of memory is rise up slow but it needs every minutes more memory until the stuttering or crash the system.

[devwebit4u]

Same problem here. Windows 11. eats all the memory and cpu 80%

[cybeardjm]

Didn't notice the memory problem, but got huge traffic on my server + cache.

Client OS and Version: Win 10

"GET /apps/passwords/img/app.svg HTTP/1.1" 200 693 "-" "Mozilla/5.0 (Windows) mirall/33.0.0 (build 20260323) (Nextcloud, windows-10.0.19045 ClientArchitecture: x86_64 OsArchitecture: x86_64)"

Description

Latest desktop app is unable to access or render app.svg for the Passwords app.
Just upgraded server to 33.01 and desktop client to 33.0.
On the server, I've been using the “Passwords” app for some time.

Now, multiple times per second, the desktop app tries to reach /apps/passwords/img/app.svg (which indeed exists on the server) generating a huge useless traffic from the server and the cache (up to 500 requests/minute).

In the desktop app, the menu with apps on the left “blinks” permanently when I open it, probably trying to show the icon but unable to do so.

If I close the desktop app, the traffic disappears instantly, ofc…
Same if I disable the Passwords app from my server.

Steps to reproduce

open desktop app - click on top left menu
check Apache access.log for
"GET /apps/passwords/img/app.svg HTTP/1.1" 200 693 "-" "Mozilla/5.0 (Windows) mirall/33.0.0 (build 20260323) (Nextcloud, windows-10.0.19045 ClientArchitecture: x86_64 OsArchitecture: x86_64)"
or similar.

[Git-together-yall]

Same here on Win 10, with the cookbook app

Temporary fix:

I renamed the app.svg on the server. Does not look nice on the nextcloud webpage and the icon is now missing in the client app menu, but the flickering and the much too frequent access stopped.

Before that it had triggered a 24 hours IP block by my webspace provider...