CVE-2026-42078: PPTAgent: Arbitrary File Write + Directory Creation via markdown_table_to_image

May 5, 2026

The markdown_table_to_image tool accepts a caller-controlled path parameter and passes it directly to get_html_table_image:

References

github.com/advisories/GHSA-hrcw-xc63-g29m
github.com/icip-cas/PPTAgent/commit/418491a9a1c02d9d93194b5973bb58df35cf9d00
github.com/icip-cas/PPTAgent/security/advisories/GHSA-hrcw-xc63-g29m
nvd.nist.gov/vuln/detail/CVE-2026-42078

Code Behaviors & Features

Detect and mitigate CVE-2026-42078 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →