CVE-2026-67400

CVSS 3.5 (low) · published 2026-10-27

A missing token type check allowed to retrieve more additional information about the WOPI configuration with a user or guest token.

Weakness: CWE-284

Source: NVD CVE-2026-67400

References

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.