Remote Code Execution Risk in Collabora Online Built-in CODE Server by Collabora
CVE-2026-110447

9.2CRITICAL

Key Information:

Vendor

Collabora

Status
Collabora Online - Built-in Code Server
Vendor
CVE Published:
14 October 2026

What is CVE-2026-110447?

The vulnerability in Collabora Online Built-in CODE Server allows attackers to execute arbitrary OS commands via a flawed implementation in proxy.php when the CODE server is not operational. This design flaw primarily impacts deployments integrated with Nextcloud, particularly after the CODE server has been restarted. It is important to note that standalone installations of Collabora Online are unaffected by this weakness. The issue has been actively exploited in the wild, raising concerns about the security of systems that rely on this integration.

Affected Version(s)

Collabora Online - Built-in CODE Server 0

References

https://github.com/CollaboraOnline/richdocumentscode/issu...
issue-tracking
https://help.nextcloud.com/t/to-collabora-built-in-user-u...
vendor-advisory

CVSS V4

Score:
9.2
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.