The Document Foundation (Vendor): news timeline & CVEs

LibreOffice says ‘no AI’ is now a software feature

The Document Foundation says LibreOffice will not add generative AI, keeping documents on-device.

The Document Foundation said LibreOffice will not add generative AI to its default installation for the foreseeable future. The nonprofit, whose software is used by tens of millions of people, said documents must not be uploaded for remote processing and the suite must function without a network connection. Users who want AI can install extensions that connect the editor to local models. It said no current integration meets requirements such as on-device data and no reliance on a single AI provider.

TechCrunch · SecurityOct 6, 15:25 UTC · 4d agoAI industry1

LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings

LibreOffice patched spreadsheet code execution; matching OpenOffice flaw CVE-2026-59265 remains unfixed.

Researchers showed that opening a Calc spreadsheet can refresh a database range, download an ODB file, and load an attacker-controlled JDBC driver, running Java code without a macro warning when Java support is enabled. LibreOffice fixed CVE-2026-63277 in versions 26.2.5 and 26.8.0 on October 5. Apache OpenOffice CVE-2026-59265 is unpatched through 4.1.16, with a fix expected in 4.1.17. V12 published proof-of-concept files, and there are no reports of in-the-wild use.

The Hacker Newsupdated Oct 8, 02:06 UTC · 3d agofirst Oct 6, 11:57 UTC · 4d agoVulnerability 2 sources CVE-2026-63277 CVE-2026-592651

The Document Foundation

Timeline2 articles

Related CVEsby mentions

Appears with

LibreOffice says ‘no AI’ is now a software feature

LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings