Haris-musa vulnerabilities
We track 2 vulnerabilities in Haris-musa products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 4, 2026.
2vulnerabilities
2critical
0high
0exploited
9.6average CVSS score
Latest Haris-musa vulnerabilities
- 9.8 Critical severity
excel-mcp-server: Improper Limitation of a Pathname to a Restricted Directory
excel-mcp-server 0.1.8 fails to enforce path confinement in stdio mode when EXCEL_FILES_PATH is unset, allowing attackers to read and write arbitrary files. Attackers can supply unchecked file paths to read and write tools to access any file accessible to the
- 9.4 Critical severity
excel-mcp-server: Improper Limitation of a Pathname to a Restricted Directory
excel-mcp-server is a Model Context Protocol server for Excel file manipulation. A path traversal vulnerability exists in excel-mcp-server versions up to and including 0.1.7. When running in SSE or Streamable-HTTP transport mode (the documented way to use this