Office-PowerPoint-MCP-Server path traversal via prompt injection

Office-PowerPoint-MCP-Server through version 2.0.7 contains a path traversal vulnerability allowing MCP callers to read and write files outside the working directory. AI agents can be steered via prompt injection to abuse the vulnerability through save_presentation, open_presentation, or manage_image functions.

Disclosed 1 October 2026 · Record updated 1 October 2026

Impact

Attackers can overwrite server-writable files or load external files by manipulating an AI agent through prompt injection to use path traversal sequences in file operations.

Our coverage

A robot arm reaches beyond its designated workbench, grasping and rearranging files in forbidden filing cabinets while a puppeteer pulls invisible strings from above.

Vulnerabilities

Path traversal flaw found in PowerPoint MCP server

CVE-2025-71427 lets a prompt-injected AI agent read and overwrite files outside the working directory of GongRzhe's Office-PowerPoint-MCP-Server.

1 Oct 2026

Sources

nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2025-71427