CVE-2026-65695 in Office-Word-MCP-Server
Summary
by MITRE • 07/23/2026
Office-Word-MCP-Server through 1.1.11 contains a path traversal vulnerability in its document tools that allows attackers who can influence the filename argument to read arbitrary .docx files or create and overwrite .docx files outside the intended working directory. Attackers can supply absolute paths or ../ traversal sequences directly to document open and save operations, bypassing the check_file_writeable and ensure_docx_extension helpers which perform no base-directory confinement or realpath validation.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Analysis
by VulDB Data Team • 07/23/2026
This vulnerability exists within Office-Word-MCP-Server version 1.1.11 and earlier, representing a critical path traversal flaw that undermines the security boundaries of document processing operations. The issue stems from insufficient input validation in filename argument handling during document open and save operations, allowing attackers to manipulate file paths beyond the intended working directory. The vulnerability specifically affects the document tools component where absolute paths or relative traversal sequences using ../ can be directly supplied by attackers to influence file system operations. The implementation lacks proper base-directory confinement mechanisms and realpath validation checks that would normally prevent such unauthorized access patterns.
The technical exploitation occurs through manipulation of filename arguments in document processing functions, bypassing existing security helpers like check_file_writeable and ensure_docx_extension. These validation functions fail to enforce any form of directory boundary checking or canonical path resolution, leaving the system vulnerable to arbitrary file read and write operations outside the designated working directory. Attackers can leverage this weakness to access sensitive .docx files that should remain protected within restricted directories, potentially gaining access to confidential documents or system resources. The vulnerability enables both information disclosure through arbitrary file reading capabilities and potential system compromise via unauthorized file creation and overwriting operations.
The operational impact of this vulnerability extends beyond simple data exposure, as it represents a fundamental breakdown in application security controls for file system operations. An attacker who can influence filename arguments during document processing can effectively bypass the intended security boundaries of the application, potentially leading to privilege escalation or data theft scenarios. The vulnerability affects both read and write operations, meaning attackers can not only extract sensitive information from arbitrary locations but also modify or overwrite critical files in other parts of the file system. This represents a significant risk for environments where Office-Word-MCP-Server processes documents from untrusted sources, as it allows for arbitrary file system manipulation without proper authorization checks.
From a cybersecurity perspective, this vulnerability aligns with CWE-22 Path Traversal and follows patterns seen in ATT&CK technique T1059 Command and Scripting Interpreter where attackers exploit application flaws to execute unauthorized file system operations. The lack of proper input validation and directory confinement mechanisms creates an attack surface that violates fundamental security principles for file handling operations. Organizations using this software should implement immediate mitigations including input sanitization, directory boundary enforcement, and restriction of document processing privileges to minimize potential exploitation. The vulnerability demonstrates the critical importance of proper path validation and sandboxing in applications that handle user-provided file paths, as inadequate controls can result in complete system compromise through seemingly benign file operations.
This flaw represents a significant security risk that requires immediate attention from system administrators and security teams responsible for maintaining Office-Word-MCP-Server environments. The vulnerability can be exploited by attackers with minimal privileges to access files outside the intended working directory, potentially leading to data breaches or system compromise. Organizations should prioritize updating to versions that address this path traversal vulnerability while implementing additional defensive measures such as network segmentation and privilege restriction for document processing operations. The security implications extend beyond immediate file access, as successful exploitation could enable further attack progression through credential theft or lateral movement within affected systems.