CVE-2026-108603: slide-maker through 5.8.0 Path Traversal via generate_images_openai.py
slide-maker through 5.8.0 contains a path traversal vulnerability in generateimagesopenai.py that allows attackers to write image files outside the output directory via manifest-supplied filenames. Attackers can influence deck source material so the image prompt manifest contains ../ or symlinked filenames, creating directories and overwriting existing files at arbitrary paths.
Affected Software
Event History
Frequently Asked Questions
What attacker access or influence is needed to exploit this issue?
An attacker must be able to influence deck source material so that the generated image prompt manifest contains a filename with ../ traversal sequences or a symlinked path. Exploitation also requires a user to run the image-generation workflow.
What can an attacker do if exploitation succeeds?
The attacker can cause image files to be written outside the intended output directory. This can create directories and overwrite existing files at arbitrary paths accessible to the process running slide-maker.
Who is most exposed?
Users or automation that generate images from deck source material influenced by untrusted parties are exposed. The impact is constrained by the filesystem permissions of the account executing the workflow.
What can be done while a fix is unavailable?
Do not run image generation against untrusted or externally supplied deck source material. Review the image prompt manifest filenames before execution and reject traversal components or symlinked paths.