Critical Apache OpenOffice vulnerability alert

A security notice dated October 2, 2026 rates CVE-2026-59265 as critical. It says a specially crafted, untrusted document can trigger arbitrary code execution, including remote execution, when opened in Apache OpenOffice 4.1.16 or earlier. The text also lists versions preceding two revision identifiers, but the supplied excerpt does not provide complete remediation guidance.\n\nTo verify the scope and recommended measures, consult the original oss-sec notice and official Apache OpenOffice and CVE records. Until you confirm the applicable fix, handle untrusted documents cautiously and do not open them in potentially affected installations. Rota’s data barrier does not replace controls against malicious files; if using AI to analyze the notice, avoid submitting sensitive organizational data or documents without authorization.