The vulnerability is a path traversal flaw, classified as CWE‑22, in the document tools of GongRzhe Office‑Word‑MCP‑Server 1.1.11. An attacker able to influence the filename supplied to open or save actions can provide absolute paths or relative traversal sequences. Because the server bypasses the check_file_writeable and ensure_docx_extension helpers, it performs no base‑directory confinement or realpath validation, enabling arbitrary reading of any .docx file on the host or allowing the creation, modification, or overwriting of .docx files outside the intended working directory. This compromise grants disclosure of sensitive documents and destructive overwrite capabilities, directly affecting confidentiality, integrity, and availability.

Office‑Word‑MCP‑Server version 1.1.11, developed by GongRzhe, is the only listed vulnerable version. The product operates as a server that processes document open and save requests for .docx files, typically running on a host with network exposure.

With a CVSS score of 7.6 the flaw is deemed high severity. The EPSS score is below 1 %, indicating a low likelihood of exploitation in the wild. The vulnerability is not cataloged in CISA KEV, so no publicly known exploitation has been reported. The attack vector requires an attacker to supply a crafted filename in an open or save request, meaning the attacker must have network or application access to the service, but authentication is not explicitly required per the description. Owners should consider the potential impact and the fact that any user with write access to the service could trigger path traversal.