CVE-2025-66208
Critical
Description
Collabora Online - Built-in CODE Server (richdocumentscode) provides a built-in server with all of the document editing features of Collabora Online. In versions prior to 25.04.702, Collabora Online has a Configuration-Dependent RCE (OS Command Injection) in richdocumentscode proxy. Users of Nextcloud with Collabora Online - Built-in CODE Server app can be vulnerable to attack via proxy.php and an intermediate reverse proxy. This vulnerability is fixed in 25.04.702.
SeverityCritical
CVSS9.8
Exploit probability—
ProductCollabora Online
PublishedDec 3, 2025
First seenDec 3, 2025
Weakness typeCWE-78OS command injection
How to fix
Update
- collabora online25.04.702 or later
- collabora collabora_online_-_built-in_code_server25.4.702 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| collabora online | v < 25.04.702 | 25.04.702 |
| collabora collabora_online_-_built-in_code_server | v < 25.4.702 | 25.4.702 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.