The issue is related to LibreLogo, a programmable turtle vector graphics script in LibreOffice, which can execute arbitrary python commands contained within the document it is launched from. Initially, protection was added to block calling LibreLogo from document event script handlers, such as mouse over, to address a previous issue. However, LibreOffice also has a feature where documents can specify that pre-installed scripts can be executed on various global script events, such as document-open. This feature was not properly validated, allowing potential exploitation. The vulnerability can be exploited by sending a specially crafted document, enabling a remote attacker to execute arbitrary code in the target system.