LibreOffice Calc allows a spreadsheet to link a cell range to an external CSV data source, and the link is stored in the document and fetched automatically when the file is opened. An attacker can craft a document containing a malicious link that points to a local file or to an arbitrary HTTP endpoint. When the user opens the document, the application reads the specified local file into the sheet or issues an HTTP GET request to the targeted host. This behavior reveals sensitive data or enables internal network probes and is mapped to CWE‑200 (Information Exposure), CWE‑918 (Server‑Side Request Forgery), and CWE‑73.

The vulnerability affects LibreOffice Calc, the spreadsheet component of the LibreOffice suite by The Document Foundation. No specific version range is disclosed in the advisory; installations that have not applied the latest LibreOffice updates are potentially vulnerable.

The CVSS score of 6.7 indicates a moderate severity. The exploit probability is not available, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is most likely local file read or network request execution triggered by opening a crafted document. If a user opens a malicious file, the application can read files from the local filesystem or communicate with arbitrary external hosts, providing information disclosure or enabling internal network probes. The moderate CVSS score and lack of reported exploitation suggest the risk is moderate but non‑negligible for environments that routinely open untrusted documents.