PPTAgent: Arbitrary File Write + Directory Creation via markdown_table_to_image
Priority LOW 21CWE-22Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · Low · Low
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub.
Summary
PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, PPTAgent is vulnerable to arbitrary file write and directory creation via markdown_table_to_image. This issue has been patched via commit 418491a.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00198 9th percentileScored 2026-11-08
Fix Fixed PPTAgent (icip-cas): 418491apptagent (PyPI): 1.1.36
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| icip-cas | PPTAgent | before 418491a | 418491a | Patch available | CNA |
| — | pptagent (PyPI) | before 1.1.36 | 1.1.36 | Patch available | GHSA-hrcw-xc63-g29m |
- PPTAgent Vendoricip-cas Affected before 418491a Fixed in 418491a Patch available CNA
- pptagent (PyPI) Vendor— Affected before 1.1.36 Fixed in 1.1.36 Patch available GHSA-hrcw-xc63-g29m
Remediation
- Fix · CNA PPTAgent (icip-cas) Fixed in 418491a
- Fix · GHSA-hrcw-xc63-g29m pptagent (PyPI) Fixed in 1.1.36 Advisory →
Timeline
- 2026-10-02 Threatist record created from CVE-2026-42078
- 2026-10-03 Alias added: GHSA-hrcw-xc63-g29m
References
More icip-cas vulnerabilities
- TI-2026-30447 PPTAgent: Arbitrary Code Execution via Python eval() of LLM-Generated Code with Builtins in Scope CVSS 3.1HIGH 8.6
- TI-2026-30448 PPTAgent: Arbitrary File Write via `save_generated_slides` CVSS 3.1MEDIUM 4.6
Sources
- CVE-2026-42078 · CVE Program
- CVE-2026-42078 · NVD
- FIRST EPSS
- GHSA-hrcw-xc63-g29m · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences