Free practical cybersecurity guidance for organisations without a security team.
hello@actionsoncyber.com
Actions On Cyber logo
Contact
← Back to Vulnerability Briefs

Critical Security Flaw in Collabora Online Could Let Hackers Take Control

A serious security flaw has been found in Collabora Online’s built-in CODE Server that allows hackers to run harmful commands remotely. This has been actively exploited recently, making it urgent for organisations using this software to act quickly to protect their systems.

24 October 2026

Reference: CVE-2026-110447

1. What is being reported?

The vulnerability is an OS command injection in a part of Collabora Online called the built-in CODE Server. It happens when the CODE Server isn’t running, such as after a restart. This flaw lets attackers execute commands on the affected system remotely, potentially taking control. It only affects the built-in CODE Server setup, not standalone Collabora Online servers.

2. What this means in plain English

If your organisation uses Collabora Online with the built-in CODE Server, hackers could exploit this flaw to gain control of your system without needing to be inside your network. This could lead to data theft, disruption of services, or further attacks. It is a critical risk that needs prompt attention.

3. Could this affect a small business?

Small businesses or charities using Collabora Online with the built-in CODE Server feature may be affected, especially if the software is internet-facing or not updated. Organisations using standalone Collabora Online servers or other document editing tools are likely not affected.

4. What to do now

  • Check if your organisation uses Collabora Online with the built-in CODE Server component.
  • Contact your IT provider or software supplier to confirm if your version is vulnerable and to get guidance on applying vendor-recommended mitigations or updates.
  • If mitigations or updates are not available, consider discontinuing use of the affected product until it is safe.
  • Ensure your organisation follows security update prioritisation guidelines and reviews internet exposure of your systems as recommended by official guidance.

5. Ask your IT provider

Can you confirm whether our Collabora Online setup uses the built-in CODE Server, and if so, have we applied the necessary mitigations or updates to protect against CVE-2026-110447?

6. Bottom line

If you use Collabora Online with the built-in CODE Server, act quickly to check and secure your system against this actively exploited critical flaw.

Information based on CISA KEV, NVD, and reputable security news reports.

Back to Vulnerability Briefs