PT-2026-136936

CVE-2026-90627

·

Published

2026-11-04

·

Updated

2026-11-04

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
The flat file database driver in Apache Openoffice versions through 4.1.16 allows a crafted document to read the contents of any local file without asking the user. Users are recommended to upgrade to version 4.1.17, which fixes this issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-552: Files or Directories Accessible to External Parties
Related identifiers
CVE-2026-90627
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com