CYBERSECURITYTRACKER
Permanent story citation

CVE-2026-90632: Apache OpenOffice: Local file inclusion via GStreamer plugin

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 12279

As cited

Copy frozen at (site build).

vulnerabilities

CVE-2026-90632: Apache OpenOffice: Local file inclusion via GStreamer plugin

Apache OpenOffice versions through 4.1.16 contain a local file inclusion vulnerability in the GStreamer multimedia component that allows a crafted document to read arbitrary local files and embed them in exported outputs such as PDFs. Users are recommended to upgrade to patch the flaw.

Why it matters: Organizations using Apache OpenOffice 4.1.16 or earlier face exposure to sensitive file disclosure if users open malicious documents; immediate patching is required.

CVEsCVE-2026-90632
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary

Open in glossary