CVE-2025-66208 - CVE House

Back to Database

Status published High CVE-2025-66208

Configuration-Dependent RCE (OS Command Injection) in richdocumentscode proxy

7.2 CVSS

Vulnerability Description

Collabora Online - Built-in CODE Server (richdocumentscode) provides a built-in server with all of the document editing features of Collabora Online. In versions prior to 25.04.702, Collabora Online has a Configuration-Dependent RCE (OS Command Injection) in richdocumentscode proxy. Users of Nextcloud with Collabora Online - Built-in CODE Server app can be vulnerable to attack via proxy.php and an intermediate reverse proxy. This vulnerability is fixed in 25.04.702.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-66208

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://github.com/CollaboraOnline/online/security/advisories/GHSA-j3q6-q5pc-v5wf

More from CollaboraOnline

View All →

Collabora Online Vulnerable to Arbitrary File Write

Remote Code Execution within Collabora Online jail with Macros Enabled

JavaScript Injection via url encoded values in links in Collabora Office Android

Collabora Online's remote host TLS certificates are not fully verified

Collabora Online Stored Cross-Site-Scripting vulnerability via tooltip

Affected Vendor

CollaboraOnline

View all reports →

Affected Software

online

Vulnerable Versions:

< 25.04.702

Timeline

Official Publish: December 3rd, 2025

Last Modified: December 3rd, 2025

Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

T1059 Command and Scripting Interpreter

T1068 Exploitation for Privilege Escalation

Privilege Escalation

T1005 Data from Local System

T1041 Exfiltration Over C2 Channel