Authentication Bypass Vulnerability in LibreOffice by The Document Foundation

CVE-2025-14714

What is CVE-2025-14714?

An authentication bypass vulnerability was identified in LibreOffice, where an embedded Python interpreter inherited Transparency, Consent, and Control (TCC) permissions from the main application. This flaw allowed attackers to run scripts with elevated user privileges by executing the interpreter directly. The vulnerability impacted versions of LibreOffice prior to 25.2.4. The fixed versions introduce parent constraints ensuring that only the primary application can launch the interpreter with such permissions, mitigating the risk of unauthorized script execution. For further details, visit the advisory page.

References