CVE-2026-90627

Published: Nov 4, 2026Modified: Nov 4, 2026

Description

The flat file database driver in Apache Openoffice versions through 4.1.16 allows a crafted document to read the contents of any local file without asking the user. Users are recommended to upgrade to version 4.1.17, which fixes this issue.

Related CWEs

CWE-552

Files or Directories Accessible to External Parties

The product makes files or directories accessible to unauthorized actors, even though they should not be.

References (1)

https://lists.apache.org/thread.html/s7y9fspdysqojnr1z7ppltxtc48b4ljf

Source: security@apache.org

Timeline

No history available yet.