Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-10-05T11:17:22 libreoffice: libreoffice: Information disclosure via automatic external CSV link loading 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CWE-73

LibreOffice Calc can link a cell range to an external csv data source, and the link is saved in the document. Such a link was fetched while the document loaded, so opening a document could read a local file into the sheet, or make a request to a host of the document's choosing. In fixed versions external data links are updated under the same link update control as other links in a spreadsheet.

A flaw was found in LibreOffice. When loading a spreadsheet, external comma-separated values (CSV) data links were automatically fetched without applying standard link update controls. A remote attacker could exploit this vulnerability by enticing a user to open a specially crafted document, causing the application to read local files into the sheet or initiate outbound network requests, resulting in information disclosure.

LibreOffice Calc automatically fetches external CSV data links during document load without enforcing standard link update control policies. By convincing a user to open a specially crafted spreadsheet, an attacker can leverage these automatic external queries to read arbitrary local files into spreadsheet cells or trigger unauthorized outbound network requests. This allows a local or remote adversary to exfiltrate sensitive local data or conduct internal network probing under the security context of the user opening the file. To mitigate this issue, configure LibreOffice Calc security options to disable or prompt for automatic updating of external links when opening documents from untrusted sources. Red Hat Enterprise Linux 6 Fix deferred libreoffice Red Hat Enterprise Linux 7 Fix deferred libreoffice Red Hat Enterprise Linux 8 Fix deferred libreoffice Red Hat Enterprise Linux 9 Fix deferred libreoffice https://www.cve.org/CVERecord?id=CVE-2026-63267 https://nvd.nist.gov/vuln/detail/CVE-2026-63267 https://www.libreoffice.org/about-us/security/advisories/cve-2026-63267