CVE-2026-42080 — PPTAgent: Arbitrary File Write via `save_generated_slides`
PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, there is an arbitrary file write vulnerability via `save_generated_slides`. This …
Published: 2026-05-04 · CVSS: 4.6 · CVSS 3.1
PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, there is an arbitrary file write vulnerability via `save_generated_slides`. This issue has been patched via commit 418491a.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7