CVE-2025-24796

Collabora Online is a collaborative online office suite based on LibreOffice. Macro support is disabled by default in Collabora Online, but can be enabled by an administrator. Collabora Online typically hosts each document instance within a jail and is allowed to download content from locations controlled by the net.lok_allow configuration option, which by default include the private IP ranges to enable access to the local network. If enabled, macros were allowed run executable binaries. By combining an ability to host executables, typically in the local network, in an allowed accessible location, with a macro enabled Collabora Online, it was then possible to install arbitrary binaries within the jail and execute them. These executables are restricted to the same jail file system and user as the document instance but can be used to bypass the additional limits on what network hosts are accessible and provide more flexibility as a platform for further attempts. This is issue is fixed in 24.04.12.4, 23.05.19, 22.05.25 and later macros.

• CWE-829

• https://github.com/CollaboraOnline/online/security/advisories/GHSA-4jjq-vgqp-qw45

Published

Mar 6, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-24790Snowflake JDBC provides a JDBC type 4 driver that supports c…5.5
• CVE-2025-24791snowflake-connector-nodejs is a NodeJS driver for Snowflake.…5.5
• CVE-2025-24792Snowflake PHP PDO Driver is a driver that uses the PHP Data …4.4
• CVE-2025-24793The Snowflake Connector for Python provides an interface for…7
• CVE-2025-24794The Snowflake Connector for Python provides an interface for…7.8
• CVE-2025-24795The Snowflake Connector for Python provides an interface for…5.5
• CVE-2025-24797Meshtastic is an open source mesh networking solution. A fau…9.8
• CVE-2025-24798Meshtastic is an open source mesh networking solution. From …6.5
• CVE-2025-24799GLPI is a free asset and IT management software package. An …9.8
• CVE-2025-2480Santesoft Sante DICOM Viewer Pro is vulnerable to an out-of-…8.4
• CVE-2025-24800Hyperbridge is a hyper-scalable coprocessor for verifiable, …9.3
• CVE-2025-24801GLPI is a free asset and IT management software package. An …8.8