Summary
generated automatically from NVD dataCollabora Online's Built-in CODE Server (richdocumentscode) has a configuration-dependent OS command injection flaw (CWE-78) in its proxy component. Nextcloud users running the app can be attacked through proxy.php when an intermediate reverse proxy is in place, potentially leading to remote code execution. The issue affects versions prior to 25.04.702, where it is fixed, and is rated CRITICAL with a CVSS v3.1 score of 9.8.
NVD description
Collabora Online - Built-in CODE Server (richdocumentscode) provides a built-in server with all of the document editing features of Collabora Online. In versions prior to 25.04.702, Collabora Online has a Configuration-Dependent RCE (OS Command Injection) in richdocumentscode proxy. Users of Nextcloud with Collabora Online - Built-in CODE Server app can be vulnerable to attack via proxy.php and an intermediate reverse proxy. This vulnerability is fixed in 25.04.702.
EPSS · FIRST.org
1.8%probability of exploitation in the next 30 days
Higher than 78% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-25, recomputed daily by FIRST.org.
CVSS v3.1 Score
Information
- Published
- 3 déc. 2025
- Updated
- 18 oct. 2026
- Status
- Analyzed
- Source
- security-advisories@github.com
Affected products
Weaknesses (CWE)
References (1)
Similar CVEs
Other vulnerabilities of type CWE-78
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.