by Kastro
Paper/Archive/CVE-2026-107699

CVE-2026-107699

tzwm ppt2png — ppt2png through 0.0.6 OS Command Injection via input and output paths

EPSS 1%CVSS 9.8
critical.is priorityof 100
44
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 73.7.737 × 2014.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

ppt2png through 0.0.6 contains an OS command injection vulnerability that allows attackers to execute operating system commands by supplying unsanitized input or output path arguments. Attackers can append shell metacharacters such as ';' to file names passed to child_process.exec() in ppt2png.js, running commands with Node.js process privileges.

Affected

ProductAffectedFixed inSource
ppt2png≤ 0.0.6–CNA

Scores by source

VulnCheck (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
VulnCheck (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

writeupgist.github.com/R3tro16/2daadc08b282c48d41203d1125d7632awriteupgithub.com/tzwm/ppt2png/blob/8c68eba7af943de27422b12c6e224d28587af7ae/ppt2png.js#L5-L35refgithub.com/tzwm/ppt2pngwriteupvulncheck.com/advisories/ppt2png-through-0.0.6-os-command-injection-via-input-and-output-paths