CVE-2026-85661

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-85661

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-85661.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-85661

Published

2026-09-04T14:32:18Z

Modified

2026-10-28T02:31:03Z

Severity

9.3 (Critical) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator

Summary

excel-mcp-server 0.1.8 Arbitrary File Read/Write via stdio mode

Details

excel-mcp-server 0.1.8 fails to enforce path confinement in stdio mode when EXCEL_FILES_PATH is unset, allowing attackers to read and write arbitrary files. Attackers can supply unchecked file paths to read and write tools to access any file accessible to the process.

Database specific

{
    "cna_assigner":  "VulnCheck",
    "cwe_ids":  [
        "CWE-22"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/85xxx/CVE-2026-85661.json"
}

References

Affected packages

Git / github.com/haris-musa/excel-mcp-server

Affected ranges

Type

GIT

Repo

https://github.com/haris-musa/excel-mcp-server

Events

Introduced

Last Affected

f51340ecd5778952405044b203d3a2d4c8a46833

Database specific

Show details

{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "last_affected":  "0.1.8"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandardRange"
        }
    ]
}

Affected versions

v0.*

v0.1.1

v0.1.2

v0.1.3

v0.1.4

v0.1.5

v0.1.6

v0.1.7

v0.1.8

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-85661.json"