Vulnerability · Published May 4, 2026 · Assigned by GitHub_M
CVE-2026-42078PPTAgent: Arbitrary File Write + Directory Creation via markdown_table_to_image
Medium 4.6
In plain English
A medium-severity path traversal in PPTAgent from icip-cas. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 10% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)4.6Medium
Exploit odds (30 days)0.2%top 90.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, PPTAgent is vulnerable to arbitrary file write and directory creation via markdown_table_to_image. This issue has been patched via commit 418491a.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| PyPI | pptagent | 1.1.36 | GHSA-hrcw-xc63-g29m |
| PyPI | pptagent | 1.1.36 | PYSEC-2026-2893 |
Affected products (as reported)
Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L