CVE-2026-63268
Received Received - Intake

LibreOffice Calc External Data Source Path Traversal

Publication date: 2026-10-05

Last updated on: 2026-10-05

Assigner: Document Foundation, The

Description
LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A link of the sql type could name a folder of local text files as a database, so opening a document could read a local text file into the sheet. In fixed versions only the csv, html and xml data providers are restored when a document is loaded.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-05
Last Modified
2026-10-05
Generated
2026-10-05
AI Q&A
2026-10-05
EPSS Evaluated
N/A
NVD
CVE-2026-63268
EUVD
EUVD-2026-92419

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
The Document Foundation LibreOffice 26.2

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-200 The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

LibreOffice Calc allows linking cell ranges to external data sources, including SQL-type links that can reference local text files. When a document is opened, this could cause the application to read local text files into the spreadsheet without proper validation in older versions.

Detection Guidance

To detect this vulnerability, inspect LibreOffice Calc documents for external data links, particularly SQL-type links pointing to local folders or text files. Check for unexpected file reads or connections initiated by LibreOffice processes.

Impact Analysis

An attacker could craft a document that, when opened, reads sensitive local files into the spreadsheet. This may expose confidential data if the user has access to restricted files. The impact is limited to local file access on the user's machine.

Compliance Impact

This vulnerability could lead to unauthorized data exposure, violating GDPR's data protection principles or HIPAA's confidentiality requirements if sensitive personal or health information is accessed. Organizations must ensure patched versions are used to maintain compliance.

Mitigation Strategies

Update LibreOffice to a fixed version where only csv, html and xml data providers are restored when a document is loaded. Avoid opening documents from untrusted sources.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-63268. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart