cbcvebase.

Haris-Musa Excel-Mcp-Server vulnerabilities

1 known vulnerability affecting haris-musa/excel-mcp-server.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2026-40576P2CRITICALCVSS 9.4fixed in 0.1.82026-04-21
CVE-2026-40576 [CRITICAL] CWE-22 CVE-2026-40576: excel-mcp-server is a Model Context Protocol server for Excel file manipulation. A path traversal vu excel-mcp-server is a Model Context Protocol server for Excel file manipulation. A path traversal vulnerability exists in excel-mcp-server versions up to and including 0.1.7. When running in SSE or Streamable-HTTP transport mode (the documented way to use this server remotely), an unauthenticated attacker on the network can read, write, and overwri
nvd
Haris-Musa Excel-Mcp-Server vulnerabilities | cvebase