Office-PowerPoint-MCP-Server vulnerabilities

CVEs whose affected-version data names the Office-PowerPoint-MCP-Server package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-71427Medium· 6.8

yesterday

Office-PowerPoint-MCP-Server through 2.0.7 contains a path traversal vulnerability that allows MCP callers to write and read files outside the working directory by supplying absolute paths or ../ sequences

Office-PowerPoint-MCP-Server through 2.0.7 contains a path traversal vulnerability that allows MCP callers to write and read files outside the working directory by supplying absolute paths or ../ sequences. Attackers can steer an AI agen…

▾ SunlitGongRzhe · Office-PowerPoint-MCP-Servervia NVD