CVE-2026-90631

Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt, possibly transferring the contents of environment variables in the process. This issue affects Apache OpenOffice: through 4.1.16. Users are recommended to upgrade to version 4.1.17, which fixes the issue.

• CWE-939

• https://lists.apache.org/thread.html/j19rrk8jwrlg41tj6rfdcccj8cyyxhz9Mailing List, Vendor Advisory
• https://www.openwall.com/lists/oss-security/2026/11/03/30Mailing List, Third Party Advisory

Published

Nov 4, 2026

Last Modified

Nov 4, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-90623A weakness has been identified in andreashappe cochise up to…3.7
• CVE-2026-90624An unchecked memory access in the PDF import code of Apache …7.3
• CVE-2026-90626An uncontrolled memory access in the PDF import code of Apac…7.3
• CVE-2026-90627The flat file database driver in Apache Openoffice versions …5.5
• CVE-2026-90628An uncontrolled memory access in the PDF export code of Apac…7.3
• CVE-2026-90629An uncontrolled memory access in the WMF import code of Apac…7.3
• CVE-2026-90632Apache OpenOffice documents can include multimedia content (…5.5
• CVE-2026-90634An uncontrolled memory access in the PDF import code of Apac…7.3
• CVE-2026-9064A flaw was found in 389-ds-base. The get_ldapmessage_control…7.5
• CVE-2026-90647ASE/Kalkitech ASE2000 V2 Communication Test Set 2.35 through…7.4
• CVE-2026-90648wasm2c in WebAssembly wabt through 1.0.41 allows sandbox esc…7.1
• CVE-2026-9065SureCart version prior to 4.2.1 are vulnerable to authentica…9.3