CVE-2026-65695

Name of the Vulnerable Software and Affected Versions Office-Word-MCP-Server versions prior to 1.1.12

Description A path traversal issue exists in the document tools. Attackers who can influence the filename argument can read arbitrary .docx files or create and overwrite .docx files outside the intended working directory. This is possible by supplying absolute paths or ../ traversal sequences to document open and save operations, which bypasses the check file writeable() and ensure docx extension() helpers because they lack base-directory confinement or realpath validation.

Recommendations Update Office-Word-MCP-Server to version 1.1.12 or later.