CVE-2026-90631
LOW
apache
openoffice
NVD
CVSS Score
3.3
Severity
LOW
Published
Nov 04, 2026
Vendor
apache
Description
Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt, possibly transferring the contents of environment variables in the process. This issue affects Apache OpenOffice: through 4.1.16. Users are recommended to upgrade to version 4.1.17, which fixes the issue.