Office Powerpoint Mcp Server
Monthly
Path traversal in PowerPoint MCP Server through version 2.0.7 allows unauthenticated attackers who can steer an AI agent via prompt injection to read and write files outside the working directory. The attack abuses unsanitized file path parameters in save_presentation, open_presentation, and manage_image's output_path, enabling overwrite of any server-writable file or loading of external files; impact is bounded by the OS privileges of the MCP server process. No public exploit identified at time of analysis, but an upstream fix (PR #33) is available; exploitation requires successful prompt injection and the agent invoking the affected tool.
Path traversal in PowerPoint MCP Server through version 2.0.7 allows unauthenticated attackers who can steer an AI agent via prompt injection to read and write files outside the working directory. The attack abuses unsanitized file path parameters in save_presentation, open_presentation, and manage_image's output_path, enabling overwrite of any server-writable file or loading of external files; impact is bounded by the OS privileges of the MCP server process. No public exploit identified at time of analysis, but an upstream fix (PR #33) is available; exploitation requires successful prompt injection and the agent invoking the affected tool.