CVE-2025-71427: Office-PowerPoint-MCP-Server through 2.0.7 Path Traversal via save_presentation and manage_image
Office-PowerPoint-MCP-Server through 2.0.7 contains a path traversal vulnerability that allows MCP callers to write and read files outside the working directory by supplying absolute paths or ../ sequences. Attackers can steer an AI agent via prompt injection to abuse savepresentation, openpresentation, or manageimage outputpath to overwrite any server-writable file or load external files.
Affected Software
Event History
Frequently Asked Questions
Which deployments should be reviewed for exposure?
Review Office-PowerPoint-MCP-Server versions through 2.0.7. Exposure is relevant where the server process can write sensitive files or access files that should not be available through its working directory.
What access or interaction does exploitation require?
An attacker needs to influence an MCP caller, either by supplying tool arguments directly or by steering an AI agent through prompt injection. The CVSS vector indicates no privileges are required, but user interaction is required and attack complexity is high.