Haris-Musa Excel-Mcp-Server
2 CVEs affecting Haris-Musa Excel-Mcp-Server. Latest disclosed: 2026-09-04. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-85661 | Critical | 9.8 | 2026-09-04 | excel-mcp-server 0.1.8 fails to enforce path confinement in stdio mode when EXCEL_FILES_PATH is unset, allowing attackers to read and write arbitrary files. At… |
CVE-2026-40576 | Critical | 9.4 | 2026-04-21 | excel-mcp-server is a Model Context Protocol server for Excel file manipulation. A path traversal vulnerability exists in excel-mcp-server versions up to and i… |