CVE-2026-63268

Name of the Vulnerable Software and Affected Versions LibreOffice Calc (affected versions not specified)

Description LibreOffice Calc allows linking a cell range to an external data source, with the link stored within the document. A link using the sql type can designate a folder containing local text files as a database. This allows an attacker to read local text files into a sheet when a document is opened. This is a Local File Inclusion (LFI) issue, where an application is tricked into exposing or executing files on the local system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.