Skip to content
NewA calmer, faster ZeroHour
Vulnerabilitymedium

Apache OpenOffice vulnerable to local file inclusion (CVE-2026-90627)

Original title: CVE-2026-90627: Apache OpenOffice: Local file inclusion via SQL provider and flat file database references

oss-security ()
Read at seclists.org
Part of a story covered by 7 sourcesMultiple Vulnerabilities in Apache OpenOffice 4.1.16 Fixed in 4.1.17Merged summary & timeline
AI summary · x-ai/grok-4.7Summaries by Vani AI

Local file inclusion via SQL provider and flat file database references in Apache OpenOffice through 4.1.16.

Apache OpenOffice versions through 4.1.16 contain a local file inclusion vulnerability via SQL provider and flat file database references. The issue was posted on oss-security by Arrigo Marchiori. Users are recommended to upgrade to version 4.1.17.

Key facts
  • Local file inclusion via SQL provider and flat file database references
  • Affects Apache OpenOffice through 4.1.16
  • Fixed in version 4.1.17
Security assessment · AI, from the article

Impact: arbitrary file access via SQL provider

What to do
  1. 1.Upgrade to Apache OpenOffice 4.1.17
Analyze CVE-2026-90627 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2026-90627
Tags
apache-openofficelocal-file-inclusionsql-provider
Vendors
Apache
Products
OpenOffice

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-90627
———

From the original article

Posted by Arrigo Marchiori on Nov 03 Severity: important https://openoffice. apache. org/...

oss-security

seclists.org

Read the full article at oss-security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.