[Bug]: Segfault when installing new apps using the website

[yhkq1]

⚠️ This issue respects the following points: ⚠️

• This is a bug, not a question or a configuration/webserver/proxy issue.
• This issue is not already reported on Github OR Nextcloud Community Forum (I've searched it).
• Nextcloud Server is up to date. See Maintenance and Release Schedule for supported versions.
• I agree to follow Nextcloud's Code of Conduct.

Bug description

When installing any app using the app store on the site, the server encounters a segfault. After restarting the server the App is there and useable though.

Steps to reproduce

1. Click your profile picture and select Apps (as Admin)
2. Select any App that is not yet installed
3. Hit Install
4. Server crashes

Expected behavior

That the server does not crash

Nextcloud Server version

33

Operating system

Debian/Ubuntu

PHP engine version

PHP 8.4

Web server

Apache (supported)

Database engine version

MariaDB

Is this bug present after an update or on a fresh install?

Upgraded to a MAJOR version (ex. 31 to 32)

Are you using the Nextcloud Server Encryption module?

Encryption is Disabled

What user-backends are you using?

• Default user-backend (database)
• LDAP/ Active Directory
• SSO - SAML
• Other

Configuration report

{
    "system": {
        "serverid": 0,
        "htaccess.RewriteBase": "\/",
        "memcache.local": "\\OC\\Memcache\\APCu",
        "memcache.distributed": "\\OC\\Memcache\\Redis",
        "memcache.locking": "\\OC\\Memcache\\Redis",
        "redis": {
            "host": "***REMOVED SENSITIVE VALUE***",
            "port": 6379,
            "password": "***REMOVED SENSITIVE VALUE***"
        },
        "apps_paths": [
            {
                "path": "\/var\/www\/html\/apps",
                "url": "\/apps",
                "writable": false
            },
            {
                "path": "\/var\/www\/html\/custom_apps",
                "url": "\/custom_apps",
                "writable": true
            }
        ],
        "default_phone_region": "de",
        "upgrade.disable-web": true,
        "instanceid": "***REMOVED SENSITIVE VALUE***",
        "passwordsalt": "***REMOVED SENSITIVE VALUE***",
        "secret": "***REMOVED SENSITIVE VALUE***",
        "trusted_domains": [
            "synceo.de",
            "100.71.234.24:1006",
            "100.71.234.24:1007",
            "nextcloud",
            "127.0.0.1"
        ],
        "overwriteprotocol": "https",
        "overwrite.cli.url": "https:\/\/synceo.de\/",
        "trusted_proxies": "***REMOVED SENSITIVE VALUE***",
        "forwarded_for_headers": [
            "HTTP_X_FORWARDED_FOR",
            "HTTP_X_FORWARDED_HOST",
            "HTTP_X_FORWARDED_PROTO"
        ],
        "enable_previews": true,
        "preview_concurrency_all": 8,
        "preview_concurrency_new": 4,
        "preview_ffmpeg_path": "\/usr\/bin\/ffmpeg",
        "enabledPreviewProviders": [
            "OC\\Preview\\PNG",
            "OC\\Preview\\JPEG",
            "OC\\Preview\\GIF",
            "OC\\Preview\\BMP",
            "OC\\Preview\\XBitmap",
            "OC\\Preview\\MP3",
            "OC\\Preview\\TXT",
            "OC\\Preview\\MarkDown",
            "OC\\Preview\\OpenDocument",
            "OC\\Preview\\Krita",
            "OC\\Preview\\WebP",
            "OC\\Preview\\Movie",
            "OC\\Preview\\MP4",
            "OC\\Preview\\MOV",
            "OC\\Preview\\MKV",
            "OC\\Preview\\AVI",
            "OC\\Preview\\3GP",
            "OC\\Preview\\PDF"
        ],
        "datadirectory": "***REMOVED SENSITIVE VALUE***",
        "dbtype": "mysql",
        "version": "33.0.1.2",
        "dbname": "***REMOVED SENSITIVE VALUE***",
        "dbhost": "***REMOVED SENSITIVE VALUE***",
        "dbtableprefix": "oc_",
        "mysql.utf8mb4": true,
        "dbuser": "***REMOVED SENSITIVE VALUE***",
        "dbpassword": "***REMOVED SENSITIVE VALUE***",
        "installed": true,
        "mail_smtpmode": "smtp",
        "mail_sendmailmode": "smtp",
        "mail_domain": "***REMOVED SENSITIVE VALUE***",
        "mail_smtphost": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpport": "465",
        "loglevel": 3,
        "config_preset": 1,
        "skeletondirectory": "",
        "defaultapp": "dashboard",
        "app_install_overwrite": [],
        "maintenance": false,
        "maintenance_window_start": "1",
        "allow_local_remote_servers": "true",
        "twofactor_enforced": "true",
        "twofactor_enforced_groups": [
            "2fa"
        ],
        "twofactor_enforced_excluded_groups": [],
        "mail_from_address": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpauth": true,
        "mail_smtpname": "***REMOVED SENSITIVE VALUE***",
        "mail_smtppassword": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpstreamoptions": {
            "ssl": {
                "allow_self_signed": false,
                "verify_peer": true,
                "verify_peer_name": true
            }
        },
        "mail_smtpsecure": "ssl"
    }
}

List of activated Apps

Enabled:
  - activity: 6.0.0-dev.0
  - admin_audit: 1.23.0
  - announcementbanner: 2.4.2
  - app_api: 33.0.0
  - bruteforcesettings: 6.0.0-dev.0
  - circles: 33.0.0
  - cloud_federation_api: 1.17.0
  - comments: 1.23.0
  - contacts: 8.4.3
  - dashboard: 7.13.0
  - dav: 1.36.0
  - federatedfilesharing: 1.23.0
  - files: 2.5.0
  - files_downloadlimit: 5.1.0-dev.0
  - files_pdfviewer: 6.0.0-dev.0
  - files_reminders: 1.6.0
  - files_sharing: 1.25.2
  - files_trashbin: 1.23.0
  - files_versions: 1.26.0
  - forms: 5.2.5
  - logreader: 6.0.0
  - lookup_server_connector: 1.21.0
  - mail: 5.7.6
  - notes: 4.13.1
  - notifications: 6.0.0
  - notify_push: 1.3.1
  - oauth2: 1.21.0
  - password_policy: 5.0.0-dev.0
  - photos: 6.0.0-dev.0
  - privacy: 5.0.0-dev.0
  - profile: 1.2.0
  - provisioning_api: 1.23.0
  - recommendations: 6.0.0-dev.0
  - related_resources: 4.0.0-dev.0
  - serverinfo: 5.0.0-dev.0
  - settings: 1.16.0
  - sharebymail: 1.23.0
  - spreed: 23.0.2
  - support: 5.0.0
  - suspicious_login: 11.0.0-dev.0
  - systemtags: 1.23.0
  - text: 7.0.0-dev.3
  - theming: 2.8.0
  - twofactor_admin: 4.11.1
  - twofactor_backupcodes: 1.22.0
  - twofactor_email: 2.8.5
  - twofactor_nextcloud_notification: 7.0.0
  - twofactor_totp: 15.0.0-dev.0
  - updatenotification: 1.23.0
  - user_status: 1.13.0
  - viewer: 6.0.0-dev.0
  - weather_status: 1.13.0
  - webhook_listeners: 1.5.0
  - workflowengine: 2.15.0
Disabled:
  - appointments: 2.6.3 (installed 2.6.3)
  - calendar: 6.2.1 (installed 6.2.1)
  - contactsinteraction: 1.14.1 (installed 1.13.1)
  - encryption: 2.21.0
  - federation: 1.23.0 (installed 1.22.0)
  - files_external: 1.25.1
  - firstrunwizard: 6.0.0-dev.0 (installed 5.0.0-dev.0)
  - nextcloud_announcements: 5.0.0 (installed 4.0.0-dev.0)
  - registration: 2.9.0 (installed 2.9.0)
  - survey_client: 5.0.0-dev.0 (installed 4.0.0-dev.0)
  - testing: 1.23.0
  - user_ldap: 1.24.0

Nextcloud Signing status

No errors have been found.

Nextcloud Logs

The bug isnt getting logged by Nextcloud but i have docker logs:

[31/Mar/2026:21:34:07 +0000] "POST /login/confirm HTTP/1.1" 200 3955 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36"
172.27.0.6:443 172.27.0.5 - - [31/Mar/2026:21:34:08 +0000] "POST /settings/apps/enable HTTP/1.1" 200 891 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36"
[Tue Mar 31 21:34:12.826075 2026] [core:notice] [pid 1:tid 1] AH00052: child pid 141 exit signal Segmentation fault (11)
[Tue Mar 31 21:34:12.826103 2026] [core:notice] [pid 1:tid 1] AH00052: child pid 319 exit signal Segmentation fault (11)
[Tue Mar 31 21:34:13.827261 2026] [core:notice] [pid 1:tid 1] AH00052: child pid 163 exit signal Segmentation fault (11)
[Tue Mar 31 21:34:13.827323 2026] [core:notice] [pid 1:tid 1] AH00052: child pid 166 exit signal Segmentation fault (11)

Additional info

Im running the nextcloud docker image along with mariadb, redis, appapi and cloudflared for tunneling.

[yhkq1]

This doesnt happen when updating apps, but when disabling/enabling apps it does as well