ACT NOWExploited vulnerability
Collabora Collabora Online – Built-in CODE Server
Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
What's happening and what to do
Attackers can run their own commands on the server remotely, because a flaw lets crafted input be passed to the operating system, and this is being actively exploited. Collabora Online built-in CODE Server, when used within the NextCloud platform. Apply the vendor's update now and check for signs of compromise.
AI summary of the sources on this page. Regenerated when a source changes.
Signals over time
- 2026-10-23Added to CISA's Known Exploited Vulnerabilities catalog.
- 2026-10-26Federal patch deadline for US agencies.
- 2026-11-03 21:55First seen here.
Source text
Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability that allows for remote code execution when the CODE server isn't running.