The flat file database driver in Apache OpenOffice versions up to 4.1.16 allows an attacker to craft a document that, when opened, causes the OpenOffice SQL provider to read any local file without prompting the user. The flaw enables direct read access to arbitrary files on the victim’s system, exposing potentially sensitive information such as configuration files, credentials, or personal data. The weakness is identified as CWE‑552, which describes missing restrictions on accessing local files by an application.

The affected product is Apache OpenOffice from the Apache Software Foundation. All releases through version 4.1.16 are vulnerable. The issue is fixed in version 4.1.17, and users are advised to upgrade to that or later releases.

EPSS data is unavailable and the vulnerability is not listed in the CISA KEV catalog, indicating limited known exploitation activity. Nonetheless, the capability to read arbitrary local files is a serious confidentiality risk. Because the exploit requires the user to open a crafted document, the attack vector is local, relying on social engineering or transmission of malicious documents via e‑mail or other channels. If an attacker can deliver such a document, the vulnerability can be exercised without additional privileges.