What is CVE-2026-7217?

CVE-2026-7217 is a medium-severity vulnerability in Deepractice Promptx, classified under Path Traversal. CVSS score: 5.3/10. Published 2026-04-28.

How severe is CVE-2026-7217?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Path Traversal in Deepractice Promptx

CVE-2026-7217

A security vulnerability has been detected in Deepractice PromptX up to 2.4.0. The affected element is the function read_docx/read_xlsx/read_pptx/list_xlsx_sheets/read_pdf of the file packages/mcp-office/src/index.ts of the component Docum…

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.001 (19.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Deepractice Promptx — versions 2.0, 2.1, 2.2

Weakness classification (CWE)

References

VDB-359817 | Deepractice PromptX Document File index.ts read_pdf absolute path traversal (technical-description, vdb-entry)
VDB-359817 | CTI Indicators (IOB, IOC, TTP, IOA) (signature, permissions-required)
Submit #802120 | Deepractice PromptX 2.4.0 Improper Authorization (third-party-advisory)
cna@vuldb.com (issue-tracking, exploit)
cna@vuldb.com (product)

Frequently asked questions

What is CVE-2026-7217?: CVE-2026-7217 is a medium-severity vulnerability in Deepractice Promptx, classified under Path Traversal. CVSS score: 5.3/10. Published 2026-04-28.
How severe is CVE-2026-7217?: Medium severity. CVSS v3 base score is 5.3 out of 10.