Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2026-63266

Arbitrary file write via calcext:data-mappings, sql provider and Firebird backup functionality

Description

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a link a document could open an embedded Firebird database that wrote a file to any location the user could write to. In fixed versions an embedded Firebird database can open or create files only inside its own private directory.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

The Document Foundation LibreOffice

Default version status: unknown

  • 26.2 to < < 26.2.5affected

References