EX
Product
excel-mcp-server
by haris-musa · last CVE Sep 4, 2026
2
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 0Medium 0Low 0
Watch

Add excel-mcp-server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-85661
9.8
1%
Sep 4
excel-mcp-server 0.1.8 Arbitrary File Read/Write via stdio mode
Affected: through 0.1.8
CVE-2026-40576
9.4
0%
Apr 21
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in excel-mcp-server
Affected: < 0.1.8
Showing 2