HIGH 7.6 NVD
CVE-2025-71427
Office-PowerPoint-MCP-Server through 2.0.7 contains a path traversal vulnerability that allows MCP callers to write and read files outside the working directory
Office-PowerPoint-MCP-Server through 2.0.7 contains a path traversal vulnerability that allows MCP callers to write and read files outside the working directory by supplying absolute paths or ../ sequences. Attackers can steer an AI agent via prompt injection to abuse save_presentation, open_presentation, or manage_image output_path to overwrite any server-writable file or load external files.
References
- https://github.com/GongRzhe/Office-PowerPoint-MCP-Server
- https://github.com/GongRzhe/Office-PowerPoint-MCP-Server/blob/3631ba2ec0c24504476f78bf74d3
- https://github.com/GongRzhe/Office-PowerPoint-MCP-Server/blob/3631ba2ec0c24504476f78bf74d3
- https://github.com/GongRzhe/Office-PowerPoint-MCP-Server/pull/33
- https://www.vulncheck.com/advisories/office-powerpoint-mcp-server-through-2.0.7-path-trave
This high severity vulnerability with a CVSS score of 7.6 was published on 2026-10-01 via NVD.
vulnfeed aggregates 9442 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.