Apache OpenOffice local file inclusion via GStreamer plugin
Original title: CVE-2026-90632: Apache OpenOffice: Local file inclusion via GStreamer plugin
Apache OpenOffice through 4.1.16 allows crafted documents to load any local file contents through GStreamer multimedia component when saved or exported.
Apache OpenOffice documents can include multimedia content such as audio or video. A crafted document could exploit the GStreamer multimedia component of Apache OpenOffice version through 4.1.16 to load the contents of any local file, and include them when the document is saved or exported, for example as PDF. Users are recommended to upgrade to version 4.1.17.
- Affects Apache OpenOffice through 4.1.16.
- Exploits GStreamer multimedia component.
- Allows loading of any local file contents.
- Includes contents when document saved or exported.
- Fixed in version 4.1.17.
Impact: Local file inclusion in documents via GStreamer
- 1.Upgrade to version 4.1.17.
- CVEs
- CVE-2026-90632
- Vendors
- Apache
- Products
- OpenOffice
- Organizations
- TrendAI Zero Day Initiative
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-90632 | — | — | — |
From the original article
Posted by Arrigo Marchiori on Nov 03 Severity: important Affected versions: - Apache OpenOffice through 4. 1. 16 Description: Apache OpenOffice documents can include multimedia content (audio, video, etc.)
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.