LibreOffice Calc permits correlating a cell range to an external data source, storing that link in the document. The link may specify a Java database driver that the application can load from a remote location. As a result opening the compromised document could execute arbitrary Java code from that remote source, giving the attacker full code‑execution capabilities on the user’s machine. This flaw is a classic Remote Code Execution (RCE) weakness identified as CWE‑829.

The vulnerability affects all versions of LibreOffice released by The Document Foundation that expose the Calcext data‑mapping feature. No specific version range was supplied, so any installation that allows external data linking is potentially susceptible, especially applications using the default Java integration.

The CVSS score of 8.5 indicates a high severity. EPSS data is unavailable, and the flaw is not listed in CISA’s KEV catalog, suggesting that widespread exploitation may not yet be observed. The likely attack vector is a social‑engineering scenario where an adversary sends a malicious document or misleads a user into enabling a link to an untrusted Java driver. The impact manifests only when the document is opened; no network service listening by LibreOffice is required for exploitation.