CVE-2026-41030: Medium severity ONLYOFFICE ONLYOFFICE DesktopEditors vulnerability
In ONLYOFFICE DesktopEditors before 9.3.0, the update service allows attackers to perform actions on files with SYSTEM privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ONLYOFFICE DesktopEditorsto a version that resolves this vulnerability.Fixed in 9.3.0
Event History
Frequently Asked Questions
What is the severity of CVE-2026-41030?
CVE-2026-41030 is a high severity vulnerability that allows attackers to perform actions on files with SYSTEM privileges.
How do I fix CVE-2026-41030?
The only way to fix CVE-2026-41030 is to update ONLYOFFICE DesktopEditors to version 9.3.0 or later.
What are the potential impacts of CVE-2026-41030?
CVE-2026-41030 can potentially allow unauthorized modifications or access to sensitive files due to elevated privileges.
Who is affected by CVE-2026-41030?
CVE-2026-41030 affects all users of ONLYOFFICE DesktopEditors versions prior to 9.3.0.
Is there a workaround for CVE-2026-41030?
There are no known effective workarounds for CVE-2026-41030; updating the software is recommended as the only mitigation.