diff --git a/lib/Controller/UserApiController.php b/lib/Controller/UserApiController.php
index 948111f6bf2..7bb726a23f6 100644
--- a/lib/Controller/UserApiController.php
+++ b/lib/Controller/UserApiController.php
@@ -55,6 +55,7 @@ public function index(string $filter = '', int $limit = 5): DataResponse {
 
 		if (!$this->getSession()->isGuest()) {
 			// Add other users to the autocomplete list
+			$limit = min($limit, 50);
 			[$result] = $this->collaboratorSearch->search($filter, [IShare::TYPE_USER], false, $limit, 0);
 			$userSearch = array_merge($result['users'], $result['exact']['users']);