Vulnerability record/PUBLISHED/Published Nov 4, 2026 11:03:29 UTC
CVE-2026-90627
The flat file database driver in Apache Openoffice versions through 4.1.16 allows a crafted document to read the contents of any local file without asking the user. Users are recommended to upgrade to version 4.1.17, which fixes this issue.
Base scoreN/A/ 10
SeverityNoneCVSS unscored
Exploitability / impact
CVSS metric breakdown
Base severityNone
No CVSS vector is available for this record.
CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.
Record context
CVE Numbering Authorityapache
Last updatedNov 4, 2026 11:03:29 UTC
PublishedNov 4, 2026 11:03:29 UTC
ReservedSep 12, 2026 20:47:58 UTC
Credits
- Edoardo Geraci and Thomas Rinsma of Codean Labs