Critical Security Flaw in LibreOffice: Macro URL Arbitrary Script Execution
Summary
RLSA-2025:3408: Important: libreoffice security update. Affects libreoffice versions < 1:7.1.8.1-15.el9_5. Fixed in 1:7.1.8.1-15.el9_5. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
LibreOffice is an open-source office productivity suite that includes essential applications such as a word processor, spreadsheet, presentation manager, formula editor, and drawing program. It serves as a successor to OpenOffice, offering enhanced features and capabilities. However, a recent vulnerability has been identified that allows for arbitrary script execution through macro URLs, posing a significant security risk to users.
Vulnerability Detail
The vulnerability, identified as CVE-2025-1080, allows attackers to execute arbitrary scripts via macro URLs. This can lead to unauthorized access to sensitive data and system compromise. The flaw originates from improper handling of macro URLs, which can be exploited by malicious actors to run harmful scripts on the user's system. The CVSS score for this vulnerability is 7.6, indicating a high severity level.
How To Fix
Minimum fixed version
1:7.1.8.1-15.el9_5
This is the first release that contains the fix.
sudo dnf update libreofficeTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users are advised to disable macros in LibreOffice until the update is applied. This can be done by navigating to Tools > Options > LibreOffice > Security and unchecking the 'Enable macro recording' option.
Conclusion
The identified vulnerability in LibreOffice poses a significant risk to users due to the potential for arbitrary script execution. It is crucial for users to update to the latest patched version to mitigate this risk. Additionally, utilizing tools like Vulert can help in monitoring for such vulnerabilities in the future.
See every vulnerability recorded for libreoffice →
FAQ
CVE-2025-1080 is a security vulnerability in LibreOffice that allows for arbitrary script execution through macro URLs.
You can check your version of LibreOffice by going to Help > About LibreOffice. If it is below 1:7.1.8.1-15.el9_5, it is affected.
Exploitation of this vulnerability can lead to unauthorized access to sensitive data and potential system compromise.
Yes, you can use Vulert, which monitors and alerts for open-source vulnerabilities in your software using just a manifest file.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Related vulnerabilities
Recent vulnerabilities recorded for libreoffice.
