Office-PowerPoint-MCP-Server versions up to 2.0.7 contain a path traversal vulnerability that permits MCP callers to escape the working directory restrictions. By supplying absolute paths or directory traversal sequences, attackers can cause the server to read or write files outside the designated directory. This is facilitated through abuse of AI agent prompt injection targeting save_presentation, open_presentation, or manage_image output_path functions, enabling overwriting or loading of arbitrary files writable by the server.

An attacker can overwrite or read arbitrary files on the server with the privileges of the Office-PowerPoint-MCP-Server process. This could lead to unauthorized data access, data corruption, or potential further compromise depending on the files affected. The vulnerability requires user interaction (UI:P) and has high complexity (AC:H), but no privileges are required (PR:N).

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the vulnerable functions and validate or sanitize input paths to prevent absolute or directory traversal sequences. Monitor for suspicious use of save_presentation, open_presentation, and manage_image output_path parameters.