Icip-cas vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Icip-cas products: 3 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-42080 Medium · 4.6 CWE-22 May 4, 2026

PPTAgent: Arbitrary File Write via `save_generated_slides`

PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, there is an arbitrary file write vulnerability via `save_generated_slides`. This issue has been patched via commit 418491a.

CVE-2026-42079 High · 8.6 CWE-95 May 4, 2026

PPTAgent: Arbitrary Code Execution via Python eval() of LLM-Generated Code with Builtins in Scope

PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, PPTAgent is vulnerable to arbitrary code execution via Python eval() of LLM-generated code with builtins in scope. This issue has been patched via commit 418491a.

CVE-2026-42078 Medium · 4.6 CWE-22 May 4, 2026

PPTAgent: Arbitrary File Write + Directory Creation via markdown_table_to_image

PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, PPTAgent is vulnerable to arbitrary file write and directory creation via markdown_table_to_image. This issue has been patched via commit 418491a.