Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/05/05 6:57 p.m.24 views

PPTAgent: Arbitrary File Write via `save_generated_slides`

Summary This vulnerability has been fixed in https://github.com/icip-cas/PPTAgent/commit/418491a9a1c02d9d93194b5973bb58df35cf9d00. The savegeneratedslides MCP tool accepts a pptxpath argument and writes the generated PPTX file to that path without any workspace restriction or path validation:...

4.6CVSS5.9AI score0.00198EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder