Apache OpenOffice ≤4.1.16 漏洞：外部链接静默加载致环境变量泄露

CVE-2026-90631: Apache OpenOffice: Remote document loaded without prompt, possibiy leaking environment variables

推荐理由

OpenOffice 用户需关注此安全漏洞，避免打开来源不明的文档以防环境变量泄露，建议尽快升级至最新版本。

Posted by Arrigo Marchiori on Nov 03

Severity: important

Affected versions:

Description:

Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an

attacker to craft a document that would cause external links

to be loaded without prompt, possibly transferring the contents of environment variables in the process.

This issue affects Apache OpenOffice: through 4.1.16.

Users are...

看懂新闻只是起点——沿量化金融路径，把它变成能交付的工程能力