Office Word Mcp Server
Monthly
Arbitrary .docx read and write in Office-Word-MCP-Server (gongrzhe) through version 1.1.11 lets an attacker who can influence the filename argument passed to the document tools escape the intended working directory using absolute paths or ../ sequences. Because the exposed open/save operations run in an MCP tool context, a malicious or prompt-injected instruction can read sensitive .docx files or create and overwrite documents anywhere the server process has filesystem access. Publicly available exploit code exists (VulnCheck), but there is no public exploit identified as actively used and it is not on CISA KEV.
Arbitrary .docx read and write in Office-Word-MCP-Server (gongrzhe) through version 1.1.11 lets an attacker who can influence the filename argument passed to the document tools escape the intended working directory using absolute paths or ../ sequences. Because the exposed open/save operations run in an MCP tool context, a malicious or prompt-injected instruction can read sensitive .docx files or create and overwrite documents anywhere the server process has filesystem access. Publicly available exploit code exists (VulnCheck), but there is no public exploit identified as actively used and it is not on CISA KEV.