The vulnerability arises from an uncontrolled search path element in the Windows installers of Apache OpenOffice versions 4.1.16 and earlier. During installation, the installer searches for executable files in directories specified by environment variables, and because those directories are not properly sanitized, an attacker can cause the installer to launch an application of their choice. If the attacker can influence the installer environment, the selected external program runs with the same elevated privileges that the installer itself runs under, allowing arbitrary code execution with system rights. This flaw is CVE‑identified as a search‑path manipulation.

Affected products are the Apache OpenOffice suite provided by the Apache Software Foundation. The issue applies to all Windows installers for OpenOffice 4.1.16 and earlier. The fix is available in version 4.1.17 and newer, which validates or neutralizes the search path during installation. No other product versions or operating systems are listed.

The risk assessment shows that the attacker must already have a manipulated system or control over the installer environment to exploit this flaw. Because the installers run with elevated privileges, a successful exploitation would allow full system compromise. No EPSS score is available, and the vulnerability is not listed in the KEV catalog, indicating no current evidence of widespread attacks. Nonetheless, the potential impact warrants immediate remediation through an upgrade or by restricting installer execution to trusted environments.