{"id":"CVE-2026-63267","published":"2026-10-05T12:17:10.713","lastModified":"2026-10-06T15:03:59.427","description":"LibreOffice Calc can link a cell range to an external csv data source, and the link is saved in the document. Such a link was fetched while the document loaded, so opening a document could read a local file into the sheet, or make a request to a host of the document's choosing. In fixed versions external data links are updated under the same link update control as other links in a spreadsheet.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-200","CWE-918"],"vendors":[],"products":[],"references":[{"url":"https://www.libreoffice.org/about-us/security/advisories/cve-2026-63267","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}