PPTAgent Arbitrary File Write and Directory Creation Vulnerability

A vulnerability in PPTAgent, prior to commit 418491a, allows for arbitrary file writing and directory creation through the 'markdown_table_to_image' function. This function accepts a path parameter and passes it to 'get_html_table_image' without proper validation, enabling the creation of arbitrary directories and the writing of files, such as images, to any location. The issue has been patched in commit 418491a.

Impact

Exploitation of this vulnerability could lead to unauthorized file writes and directory creations, with potential scenarios including the replacement of SSH keys, writing web shells to server directories, or probing directory permissions.

Remediation

Users can update to the version containing commit 418491a to address this vulnerability.