GongRzhe Office-Word-MCP-Server up to 1.1.11 Document Tools check_file_writeable/ensure_docx_extension filename path traversal

Summaryinfo

A vulnerability labeled as critical has been found in GongRzhe Office-Word-MCP-Server up to 1.1.11. Affected by this vulnerability is the function check_file_writeable/ensure_docx_extension of the component Document Tools. Executing a manipulation of the argument filename can lead to path traversal. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is handled as CVE-2026-65695. The attack can be executed remotely. There is not any exploit available.

Detailsinfo

A vulnerability has been found in GongRzhe Office-Word-MCP-Server up to 1.1.11 and classified as critical. This vulnerability affects the function check_file_writeable/ensure_docx_extension of the component Document Tools. The manipulation of the argument filename with an unknown input leads to a path traversal vulnerability. The CWE definition for the vulnerability is CWE-22. The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

Office-Word-MCP-Server through 1.1.11 contains a path traversal vulnerability in its document tools that allows attackers who can influence the filename argument to read arbitrary .docx files or create and overwrite .docx files outside the intended working directory. Attackers can supply absolute paths or ../ traversal sequences directly to document open and save operations, bypassing the check_file_writeable and ensure_docx_extension helpers which perform no base-directory confinement or realpath validation.

The advisory is shared for download at github.com. This vulnerability was named CVE-2026-65695 since 07/22/2026. The exploitation appears to be easy. The attack can be initiated remotely. There are known technical details, but no exploit is available. The current price for an exploit might be approx. USD $0-$5k (estimation calculated on 07/23/2026). The MITRE ATT&CK project declares the attack technique as T1006.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Artificial Intelligence Software

Vendor

• GongRzhe

Name

• Office-Word-MCP-Server

Version

• 1.1.0
• 1.1.1
• 1.1.2
• 1.1.3
• 1.1.4
• 1.1.5
• 1.1.6
• 1.1.7
• 1.1.8
• 1.1.9
• 1.1.10
• 1.1.11

Support

• end of life

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion