Critical · published December 4, 2025
🚨 A sneaky configuration flaw allows attackers to execute commands remotely with just a proxy request! 🔥 Think of it like a restaurant where the waiter can take orders directly to the kitchen without ever checking what the customer really wants — a recipe for chaos if the wrong request slips through! If exploited, an attacker could potentially take complete control of your server, running any command they wish — which could lead to data breaches, service disruptions, or even total server takeover. The stakes are high, and with millions of documents at risk, you don't want to leave this door wide open!
Think of it like a restaurant where the waiter can take orders directly to the kitchen without ever checking what the customer really wants — a recipe for chaos if the wrong request slips through! This vulnerability in the Collabora Online built-in CODE server allows for Remote Code Execution (RCE) through misconfigurations in the richdocumentscode proxy. An attacker can use the proxy.php endpoint to inject malicious commands, exploiting the trust placed in intermediate proxies.
If exploited, an attacker could potentially take complete control of your server, running any command they wish — which could lead to data breaches, service disruptions, or even total server takeover. The stakes are high, and with millions of documents at risk, you don't want to leave this door wide open! Update to version 25.04.702 immediately to patch this vulnerability. Additionally, ensure proper configurations and review your proxy settings to prevent future exploits. Regularly audit your security policies to stay ahead! You've got this! By taking these simple steps, you'll bolster your defenses and keep your documents safe! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| collabora/online | < 25.04.702 | 25.04.702 |