CVE-2019-9848: LibreOffice has a feature where documents can specify that pre-installed scripts can be executed on various...

Security readout for executives and security teams

CVE-2019-9848 lets a malicious LibreOffice document abuse built-in scripting behavior to run Python commands without a warning. The issue affects LibreOffice versions before 6.2.5. Business risk is highest where staff open documents from email, customers, partners, or public sources. Exposure is likely on endpoints or servers running LibreOffice before 6.2.5, including Linux distributions that shipped vulnerable LibreOffice packages before their 2019 security updates. Treat as a high-priority endpoint patching issue, especially for teams that process external documents. It enables silent command execution through a document feature, but the provided evidence does not show active exploitation. Mitigation focus: Upgrade LibreOffice to 6.2.5 or a vendor-patched package.; Apply relevant distribution security updates for managed Linux fleets.; Restrict opening untrusted documents until affected systems are patched..

Prepared

Jun 6, 2026, 20:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.