{"id":"CVE-2026-107699","published":"2026-10-08T19:17:01.853","lastModified":"2026-10-14T02:16:57.447","description":"ppt2png through 0.0.6 contains an OS command injection vulnerability that allows attackers to execute operating system commands by supplying unsanitized input or output path arguments. Attackers can append shell metacharacters such as ';' to file names passed to child_process.exec() in ppt2png.js, running commands with Node.js process privileges.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-78"],"vendors":[],"products":[],"references":[{"url":"https://gist.github.com/R3tro16/2daadc08b282c48d41203d1125d7632a","tags":[]},{"url":"https://github.com/tzwm/ppt2png","tags":[]},{"url":"https://github.com/tzwm/ppt2png/blob/8c68eba7af943de27422b12c6e224d28587af7ae/ppt2png.js#L5-L35","tags":[]},{"url":"https://www.vulncheck.com/advisories/ppt2png-through-0.0.6-os-command-injection-via-input-and-output-paths","tags":[]}],"exploitRefs":[{"url":"https://gist.github.com/R3tro16/2daadc08b282c48d41203d1125d7632a","tags":[]},{"url":"https://github.com/tzwm/ppt2png","tags":[]},{"url":"https://github.com/tzwm/ppt2png/blob/8c68eba7af943de27422b12c6e224d28587af7ae/ppt2png.js#L5-L35","tags":[]}],"hasPoc":true,"ai":{"summary":"The vulnerability in ppt2png through 0.0.6 allows attackers to execute arbitrary OS commands via unsanitized input, posing a critical risk.","exploitability":"Exploitation is relatively straightforward as attackers can append shell metacharacters to file names, requiring only Node.js process privileges.","blast_radius":"If exploited, this could lead to full system compromise, allowing attackers to run arbitrary commands with the Node.js process privileges.","remediation":"Upgrade to ppt2png 0.0.7 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","os-command-injection","nodejs"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-09T08:43:09.289Z"}}