PT-2026-33271 · Onlyoffice · Onlyoffice Desktopeditors

Published 2026-04-16 · Updated 2026-04-16 · CVE-2026-41030

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ONLYOFFICE DesktopEditors versions prior to 9.3.0

Description The update service allows attackers to perform actions on files with SYSTEM privileges, which are the highest level of privileges on a Windows system, enabling full control over the operating system.

Recommendations Update to version 9.3.0.

Fix

LPE

Weakness Enumeration

CWE-669

Related Identifiers

CVE-2026-41030

Affected Products

Onlyoffice Desktopeditors

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-41030 · Security Note
• https://github.com/ONLYOFFICE/DesktopEditors/blob/master/CHANGELOG.md · Note
• https://twitter.com/VulmonFeeds/status/2044745942490832902 · Twitter Post
• https://twitter.com/CVEnew/status/2044701562933833957 · Twitter Post