As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-90631: Apache OpenOffice: Remote document loaded without prompt, possibiy leaking environment variables
Apache OpenOffice versions through 4.1.16 contain a missing authorization vulnerability that allows external links within documents to load without user prompts, potentially exposing environment variables. An attacker can craft a malicious document that triggers these unauthorized link loads, transferring sensitive data.
Why it matters: Organizations using Apache OpenOffice 4.1.16 or earlier face data exposure risk when opening untrusted documents; administrators should prioritize patching or restricting document sources.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CVE-2026-90631: Apache OpenOffice: Remote document loaded without prompt, possibly leaking environment variables
Apache OpenOffice versions through 4.1.16 contain a missing authorization vulnerability that allows external links within documents to load without user prompts, potentially exposing environment variables. An attacker can craft a malicious document that triggers these unauthorized link loads, transferring sensitive data.
Why it matters: Organizations using Apache OpenOffice 4.1.16 or earlier face data exposure risk when opening untrusted documents; administrators should prioritize patching or restricting document sources.
- Source published
- First seen by Cybersecurity Tracker