Excel Mcp Server
Monthly
Arbitrary file read and write in excel-mcp-server 0.1.8 lets attackers escape the intended Excel workspace when the server runs in stdio mode with the EXCEL_FILES_PATH environment variable unset. Because path confinement is not enforced, unchecked absolute or traversal paths passed to the read and write tools reach any file the server process can access, enabling disclosure of secrets and overwrite of arbitrary files (CWE-22). Reported by VulnCheck; the issue is tracked upstream (issue #149) with no public exploit identified at time of analysis.
Remote unauthenticated path traversal in excel-mcp-server versions ≤0.1.7 allows network attackers to read, write, and overwrite arbitrary files on the host filesystem. The server's get_excel_path() function fails to validate file paths in two ways: it passes absolute paths without checking boundaries and joins relative paths without resolving traversal sequences. With default configuration binding to 0.0.0.0 (all network interfaces) and no authentication on SSE/Streamable-HTTP transport modes, exploitation is trivial. Vendor-released patch available in version 0.1.8. EPSS data not available; no CISA KEV listing identified at time of analysis.
Arbitrary file read and write in excel-mcp-server 0.1.8 lets attackers escape the intended Excel workspace when the server runs in stdio mode with the EXCEL_FILES_PATH environment variable unset. Because path confinement is not enforced, unchecked absolute or traversal paths passed to the read and write tools reach any file the server process can access, enabling disclosure of secrets and overwrite of arbitrary files (CWE-22). Reported by VulnCheck; the issue is tracked upstream (issue #149) with no public exploit identified at time of analysis.
Remote unauthenticated path traversal in excel-mcp-server versions ≤0.1.7 allows network attackers to read, write, and overwrite arbitrary files on the host filesystem. The server's get_excel_path() function fails to validate file paths in two ways: it passes absolute paths without checking boundaries and joins relative paths without resolving traversal sequences. With default configuration binding to 0.0.0.0 (all network interfaces) and no authentication on SSE/Streamable-HTTP transport modes, exploitation is trivial. Vendor-released patch available in version 0.1.8. EPSS data not available; no CISA KEV listing identified at time of analysis.