Skip to content
OpenAdvisories

Package · PyPI

excel-mcp-server

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.4
    CVE-2026-40576

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in excel-mcp-server

    excel-mcp-server is a Model Context Protocol server for Excel file manipulation. A path traversal vulnerability exists in excel-mcp-server versions up to and including 0.1.7. When running in SSE or Streamable-HTTP transport mode (the documented way to use thi…

    haris-musa excel-mcp-server excel-mcp-server PyPI