Executive brief
Deepractice PromptX, an AI agent context platform, contains a security flaw in its document handling component. This vulnerability allows an attacker to remotely access and read sensitive files (such as Word, Excel, and PDF documents) from the server's local storage that should otherwise be protected. This could lead to the unauthorized exposure of private business documents and customer data.
Technical details
An absolute path traversal vulnerability exists in the Document File Handler component of Deepractice PromptX (specifically within packages/mcp-office/src/index.ts). The functions read_docx, read_xlsx, read_pptx, list_xlsx_sheets, and read_pdf fail to properly validate or sanitize the 'path' argument before passing it to filesystem sinks like fs.readFileSync and AdmZip. A remote attacker can exploit this by providing an absolute file path, bypassing intended workspace boundaries to read arbitrary Office and PDF documents on the host system. As of the advisory date, no official patch has been released, though the issue has been publicly disclosed.
Affected products
- Deepractice PromptX up to 2.4.0
Timeline
- 2026-04-10: disclosed: Issue reported to vendor via GitHub issue #571
- 2026-04-28: advisory: Vulnerability published via VulDB/NVD