VulnSocial

CVE-2026-104085

LOWCVSS 8.7 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

odt2spip plugin for SPIP before 4.4.0 contains an OS command injection vulnerability that allows authenticated authors to execute arbitrary commands by uploading a document with a maliciously crafted filename through the document import form. Attackers can embed shell metacharacters such as $(id) in a non-.odt filename, which survives insufficient sanitization in odt2spip_deplacer_fichier_upload() and LibreOffice::createCommand(), to achieve remote code execution as the web-server user during the LibreOffice conversion process.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-10-29: 110-29
Referenced assets1 URL
Full discourse1 post
  • VulnCheck@VulnCheckAI

    An author account. A crafted filename. Code execution on the server. VulnCheck recently disclosed CVE-2026-104085 in SPIP’s odt2spip plugin. Upgrade to 4.4.0 or deactivate the plugin until you can. Read the research: https://www.vulncheck.com/blog/spip-odt2spip-authenticated-command-injection-rce

    00040162
    960 followersView on X

Explore more

Back to dashboard