What happened
A researcher disclosure (CVE-2026-65695, CVSS 6.8/7.6, published July 23 2026) found that this archived MCP server's document tools do not validate or canonicalize filenames before performing file operations, permitting path traversal.
Why it matters
As an unmaintained MCP tool, any deployment remains permanently vulnerable to path traversal via LLM-influenced filenames, letting a prompt-injected or malicious agent read sensitive files or overwrite documents outside its sandboxed working directory — low blast radius given the project is archived/niche but a precise, real risk to any lingering deployments.
Attack vector
Attackers who can influence the filename argument passed to the MCP server's document open/save tools supply absolute paths or ../ traversal sequences, bypassing the check_file_writeable and ensure_docx_extension helpers (which perform no base-directory confinement), to read arbitrary .docx files or create/overwrite files outside the intended working directory.
Affected systems
Office-Word-MCP-Server through 1.1.11 (project archived 2026-03-03)
Mitigation
No patch available — the project is archived; discontinue use or apply strict external path validation/sandboxing before exposing this MCP server to any untrusted input (including LLM-generated filenames).