CVE-2026-25511: Group-Office is vulnerable to SSRF and File Read in WOPI service discovery
Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.150, 25.0.82, and 26.0.5, an authenticated user within the System Administrator group can trigger a full SSRF via the WOPI service discovery URL, including access to internal hosts/ports. The SSRF response body can be exfiltrated via the built‑in debug system, turning it into a visible SSRF. This also allows full server-side file read. This issue has been patched in versions 6.8.150, 25.0.82, and 26.0.5.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-25511?
CVE-2026-25511 has been classified as a critical vulnerability due to its potential to cause unauthorized access and data exposure.
How do I fix CVE-2026-25511?
To fix CVE-2026-25511, update Group-Office to versions 6.8.150, 25.0.82, or 26.0.5 or later.
Who is affected by CVE-2026-25511?
CVE-2026-25511 affects all authenticated users within the System Administrator group using vulnerable versions of Group-Office.
What type of vulnerability is CVE-2026-25511?
CVE-2026-25511 is a Server-Side Request Forgery (SSRF) and File Read vulnerability.
What actions can an attacker take with CVE-2026-25511?
An attacker can exploit CVE-2026-25511 to perform SSRF attacks, potentially leading to unauthorized access to internal services and sensitive data.