https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 08:35:03 +0000 https://cve.radiocsirt.org/vuln/cve-2026-42080 <p><strong>Affected:</strong> icip-cas PPTAgent</p> <p>PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, there is an arbitrary file write vulnerability via `save_generated_slides`. This issue has been patched via commit 418491a.</p> <p><strong>Affected:</strong> icip-cas PPTAgent</p> <p>PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, there is an arbitrary file write vulnerability via `save_generated_slides`. This issue has been patched via commit 418491a.</p> https://cve.radiocsirt.org/vuln/cve-2026-42080 https://cve.radiocsirt.org/vuln/pysec-2026-2894 <p><strong>Affected:</strong> PyPI: pptagent</p> <p>## Summary</p> <p>&gt; This vulnerability has been fixed in https://github.com/icip-cas/PPTAgent/commit/418491a9a1c02d9d93194b5973bb58df35cf9d00.</p> <p>The `save_generated_slides` MCP tool accepts a pptx_path argument and writes the generated PPTX file to that path without any workspace restriction or path validation:</p> <p>```python # pptagent/mcp_server.py:288-300 async def save_generated_slides(pptx_path: str): &#34;&#34;&#34;Save the generated slides to a PowerPoint file.</p> <p>Args: pptx_path: The path to save the PowerPoint file &#34;&#34;&#34; pptx = Path(pptx_path) assert len(self.slides), ( &#34;No slides generated, please call `generate_slide` first&#34; ) pptx.parent.mkdir(parents=True, exist_ok=True) # ← creates arbitrary directories self.empty_prs.save(pptx_path) # ← writes to arbitrary path ```</p> <p>The call to `pptx.parent.mkdir(parents=True, exist_ok=True)` creates any intermediate directories, and `self.empty_prs.save(pptx_path)` writes a valid PPTX binary (ZIP archive) to the specified path. No is_relative_to(workspace) check is performed — contrast with download_file in deeppresenter/tools/search.py:290, which correctly enforces workspace confinement.</p> <p>The server changes directory to WORKSPACE (if set) on startup, so relative paths land in the workspace. Absolute paths, however, reach any filesystem location accessible to the server process.</p> <p>## Impact</p> <p>The concrete attack scenarios include</p> <p>1. Cron persistence (root-running server): `pptx_path =…</p> <p><strong>Affected:</strong> PyPI: pptagent</p> <p>## Summary</p> <p>&gt; This vulnerability has been fixed in https://github.com/icip-cas/PPTAgent/commit/418491a9a1c02d9d93194b5973bb58df35cf9d00.</p> <p>The `save_generated_slides` MCP tool accepts a pptx_path argument and writes the generated PPTX file to that path without any workspace restriction or path validation:</p> <p>```python # pptagent/mcp_server.py:288-300 async def save_generated_slides(pptx_path: str): &#34;&#34;&#34;Save the generated slides to a PowerPoint file.</p> <p>Args: pptx_path: The path to save the PowerPoint file &#34;&#34;&#34; pptx = Path(pptx_path) assert len(self.slides), ( &#34;No slides generated, please call `generate_slide` first&#34; ) pptx.parent.mkdir(parents=True, exist_ok=True) # ← creates arbitrary directories self.empty_prs.save(pptx_path) # ← writes to arbitrary path ```</p> <p>The call to `pptx.parent.mkdir(parents=True, exist_ok=True)` creates any intermediate directories, and `self.empty_prs.save(pptx_path)` writes a valid PPTX binary (ZIP archive) to the specified path. No is_relative_to(workspace) check is performed — contrast with download_file in deeppresenter/tools/search.py:290, which correctly enforces workspace confinement.</p> <p>The server changes directory to WORKSPACE (if set) on startup, so relative paths land in the workspace. Absolute paths, however, reach any filesystem location accessible to the server process.</p> <p>## Impact</p> <p>The concrete attack scenarios include</p> <p>1. Cron persistence (root-running server): `pptx_path =…</p> https://cve.radiocsirt.org/vuln/pysec-2026-2894