Vulnerabilities

TI-2025-43538 CVE-2025-71427 · GHSA-xpvr-6r3p-gm34

Office-PowerPoint-MCP-Server through 2.0.7 Path Traversal via save_presentation and manage_image

LOW 35

Office-PowerPoint-MCP-Server through 2.0.7 contains a path traversal vulnerability that allows MCP callers to write and read files outside the working directory by supplying absolute paths or ../ sequences.

CVSS 4.0HIGH 7.6 Network No auth User interaction EPSS 0.00289 Published 2026-10-01 No fix listed CWE-22

TI-2026-46829 CVE-2026-65695 · GHSA-jp99-gp4p-v5cc

Office-Word-MCP-Server 1.1.11 Path Traversal via document tools

HIGH 66

Office-Word-MCP-Server through 1.1.11 contains a path traversal vulnerability in its document tools that allows attackers who can influence the filename argument to read arbitrary .docx files or create and overwrite .doc…

CVSS 4.0HIGH 7.6 Network No auth User interaction EPSS 0.00483 Published 2026-07-23 No fix listed CWE-22

TI-2025-38007 CVE-2025-61492 · GHSA-h4rf-624j-gj33

A command injection vulnerability in the execute_command function of…

HIGH 82

A command injection vulnerability in the execute_command function of terminal-controller-mcp 0.1.7 allows attackers to execute arbitrary commands via a crafted input.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02138 Published 2026-01-07 No fix listed CWE-77

Vulnerabilities

Filters

Office-PowerPoint-MCP-Server through 2.0.7 Path Traversal via save_presentation and manage_image

Office-Word-MCP-Server 1.1.11 Path Traversal via document tools

A command injection vulnerability in the execute_command function of…