CVE-2026-63269
published 2026-10-05CVE-2026-63269: LibreOffice can link to audio and video files from a document, and on Linux it plays them with GStreamer. A linked media file could be an HLS playlist that…
PriorityP426medium6.7CVSS 4.0
AVLACLATNPRLUIPVCHVINVANSCHSINSANEXCRXIRXARXMAVXMACXMATXMPRXMUIXMVCXMVIXMVAXMSCXMSIXMSAXSXAUXRXVXREXUX
EPSS
0.11%
1.2th percentile
LibreOffice can link to audio and video files from a document, and on Linux it plays them with GStreamer. A linked media file could be an HLS playlist that made GStreamer read the local files and remote URLs it listed while the document loaded, and their contents could end up in the document. In fixed versions LibreOffice does not follow playlists that name further resources, and linked media is under link update control.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| libreoffice | libreoffice | — | — |
| the_document_foundation | libreoffice | >= 26.2 < < 26.2.5 | < 26.2.5 |
CVSS provenance
nvdv4.06.7MEDIUMCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vendor_redhat6.7MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
libreoffice: LibreOffice: Information disclosure via malicious HLS media playlists
vendor_redhat·2026-10-05·CVSS 6.7
CVE-2026-63269 [MEDIUM] CWE-73 libreoffice: LibreOffice: Information disclosure via malicious HLS media playlists
libreoffice: LibreOffice: Information disclosure via malicious HLS media playlists
LibreOffice can link to audio and video files from a document, and on Linux it plays them with GStreamer. A linked media file could be an HLS playlist that made GStreamer read the local files and remote URLs it listed while the document loaded, and their contents could end up in the document. In fixed versions LibreOffice does not follow playlists that name further resources, and linked media is under link update control.
A flaw was found in LibreOffice. When processing linked audio or video files on Linux systems, the application uses the GStreamer multimedia framework for playback. By convincing a victim to open a specially crafted document containing a malicious HTTP Live Streaming (HLS) playlist, an at
GHSA
LibreOffice can link to audio and video files from a document, and on Linux it plays them with GStreamer.
ghsa_unreviewed·2026-10-05
CVE-2026-63269 [MEDIUM] CWE-200 LibreOffice can link to audio and video files from a document, and on Linux it plays them with GStreamer.
LibreOffice can link to audio and video files from a document, and on Linux it plays them with GStreamer. A linked media file could be an HLS playlist that made GStreamer read the local files and remote URLs it listed while the document loaded, and their contents could end up in the document. In fixed versions LibreOffice does not follow playlists that name further resources, and linked media is under link update control.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-63269 libreoffice: LibreOffice: Information disclosure via malicious HLS media playlists [fedora-all]
bugzilla·2026-10-06·CVSS 6.7
CVE-2026-63269 [MEDIUM] CVE-2026-63269 libreoffice: LibreOffice: Information disclosure via malicious HLS media playlists [fedora-all]
CVE-2026-63269 libreoffice: LibreOffice: Information disclosure via malicious HLS media playlists [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
LibreOffice can link to audio and video files from a document, and on Linux it plays them with GStreamer. A linked media file could be an HLS playlist that made GStreamer read the local files and remote URLs it listed while the document loaded, and their contents could end up in the document. In fixed versions LibreOffice does not follow playlists that name further resources, and linked media is under link update control.
Bugzilla
CVE-2026-63269 libreoffice: LibreOffice: Information disclosure via malicious HLS media playlists
bugzilla·2026-10-05·CVSS 6.7
CVE-2026-63269 [MEDIUM] CVE-2026-63269 libreoffice: LibreOffice: Information disclosure via malicious HLS media playlists
CVE-2026-63269 libreoffice: LibreOffice: Information disclosure via malicious HLS media playlists
LibreOffice can link to audio and video files from a document, and on Linux it plays them with GStreamer. A linked media file could be an HLS playlist that made GStreamer read the local files and remote URLs it listed while the document loaded, and their contents could end up in the document. In fixed versions LibreOffice does not follow playlists that name further resources, and linked media is under link update control.
2026-10-05
Published