Description
PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, PPTAgent is vulnerable to arbitrary file write and directory creation via markdown_table_to_image. This issue has been patched via commit 418491a.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| icip-cas | PPTAgent | < 418491a9a1c02d9d93194b5973bb58df35cf9d00 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | pptagent | < 1.1.36 | 1.1.36 | GHSA-hrcw-xc63-g29m |