CVE-2026-63278 affects LibreOffice from The Document Foundation. Crafted document links could expand environment variable or INI file values and exfiltrate that data to a remote server when a document is opened. Versions before 26.2.5 are affected. Update to LibreOffice 26.2.5. No exploitation has been confirmed. https://www.libreoffice.org/about-us/security/advisories/CVE-2026-63278 #infosec #cybersecurity