Tools AI Risk Radar ai-incident-0132
Incident record
PowerPoint MCP tools can read and overwrite outside files
- Severity
- Medium
- Status
- Proof-of-concept
- Type
- Infra Vuln
- Target
- Office-PowerPoint-MCP-Server through 2.0.7
- Actor
- researcher
- CVE
- CVE-2025-71427
What happened
MCP callers can read or overwrite files outside the PowerPoint server’s intended working directory. Injected instructions can steer an agent towards these calls. The CVE was published on 1 October 2026 despite its 2025 identifier, and scores 6.8 Medium under CVSS 3.1.
The CVSS vector includes user interaction. The affected functions save presentations and manage images. Fix proposal 33 remained open and unmerged on 5 October; file access also depends on the server account’s permissions.
Sources
- CVE recordcveawg.mitre.org/api/cve/CVE-2025-71427
- Researcher report and proposed fixgithub.com/GongRzhe/Office-PowerPoint-MCP-Server/pull/33
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 13 October 2026