EUVD-2026-71117
GHSA-xv88-r947-5c3v
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Stdio mode is a locally-driven process so AV:L; no auth or interaction gate the tool calls (PR:N/UI:N); arbitrary read and write yield C:H/I:H and file overwrite supports A:H.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
2DescriptionCVE.org
excel-mcp-server 0.1.8 fails to enforce path confinement in stdio mode when EXCEL_FILES_PATH is unset, allowing attackers to read and write arbitrary files. Attackers can supply unchecked file paths to read and write tools to access any file accessible to the process.
AnalysisAI
Arbitrary file read and write in excel-mcp-server 0.1.8 lets attackers escape the intended Excel workspace when the server runs in stdio mode with the EXCEL_FILES_PATH environment variable unset. Because path confinement is not enforced, unchecked absolute or traversal paths passed to the read and write tools reach any file the server process can access, enabling disclosure of secrets and overwrite of arbitrary files (CWE-22). …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires the server to be running in stdio transport mode AND the EXCEL_FILES_PATH environment variable to be unset (its intended sandbox root); under these conditions the read and write tools accept unchecked absolute or ../ traversal paths and operate on any file accessible to the server process. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The supplied CVSS 4.0 vector (9.3, AV:N/AC:L/PR:N/UI:N/VC:H/VI:H/VA:H) rates this critical, but the AV:N network assessment is in tension with the described precondition: exploitation applies to stdio transport mode, which is a local process driven by a local client, so a local/adjacent vector (AV:L) is more defensible - verify transport assumptions with the vendor. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patched version is identified in the provided data (upstream tracking exists in issue #149 but no fixed tag is confirmed) - treat as No vendor-released patch identified at time of analysis and monitor the repository for a release above 0.1.8. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify all systems running excel-mcp-server 0.1.8, particularly those deployed in stdio mode without EXCEL_FILES_PATH set; immediately set the EXCEL_FILES_PATH environment variable to a restricted directory to confine file access scope. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Excel Mcp Server
View allSame weakness CWE-22 – Path Traversal
View allSame technique Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today