CVE-2026-42078 — PPTAgent: Arbitrary File Write + Directory Creation via markdown_table_to_image
PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, PPTAgent is vulnerable to arbitrary file write and directory creation via markdow…
Published: 2026-05-04 · CVSS: 4.6 · CVSS 3.1
PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, PPTAgent is vulnerable to arbitrary file write and directory creation via markdown_table_to_image. This issue has been patched via commit 418491a.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7