Critical Security Vulnerability Exploited in Collabora Online

Threat actors are exploiting a critical Remote Code Execution vulnerability, identified by the CVE number CVE-2026-110447, in the Collabora Online - Built-in CODE Server App (richdocumentscode) for Nextcloud. This vulnerability allows attackers to execute arbitrary code on affected servers, potentially leading to severe security incidents. The flaw was discovered in version 4.4.0 of Collabora Online. Security researchers warn that exploiting this vulnerability enables attackers to gain full control over the affected systems. Attacks typically occur through manipulated documents opened by users.

Affected organizations are urged to take immediate action to protect their systems. This includes updating to the latest version of Collabora Online, which contains security updates. The developers have already released an update that addresses the vulnerability. The security flaw has been classified as critical due to its high exploitability and significant impact on the affected systems. Experts estimate that several thousand Nextcloud instances worldwide are potentially at risk.

Attacks exploiting this vulnerability have already led to a number of incidents where data has been compromised. Security analyses indicate that attackers are specifically targeting businesses and organizations using Collabora Online in conjunction with Nextcloud. To minimize risks, security experts recommend reviewing server configurations and implementing additional security measures, such as restricting access to the application and monitoring for suspicious activities. The community has already responded to the threat by disseminating information about the vulnerability and its exploitation. Security researchers and IT administrators are exchanging ideas on possible countermeasures in forums and social media.

The vulnerability CVE-2026-110447 is not the first of its kind discovered in Collabora Online. Previous security flaws have also led to similar attacks, underscoring the need for regular updates and security audits. The developers of Collabora have announced that they will continue to work on improving the security of their products. Another patch is scheduled for November 15, 2026, to implement additional security measures.