{"id":"CVE-2026-3029","aliases":["GHSA-cxqh-p2w9-fmr7","PYSEC-2026-3001"],"title":"PyMuPDF has a path traversal in _main_.py","summary":"PyMuPDF has a path traversal in _main_.py","severity":"medium","vendor":"pymupdf","product":"pymupdf","ecosystem":"pip","affected":["pymupdf >= 1.26.5, < 1.26.7"],"patched":["pymupdf 1.26.7"],"published":"2026-03-19","updated":"2026-07-13","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-cxqh-p2w9-fmr7","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3029"},{"url":"https://github.com/pymupdf/PyMuPDF"},{"url":"https://www.kb.cert.org/vuls/id/504749"},{"url":"http://github.com/pymupdf/PyMuPDF"},{"url":"http://github.com/pymupdf/PyMuPDF/commit/603cafe38a183b8bab34f16d05043b4185d8d40a"}],"tags":["osv","pip"],"epss":0.00354,"epssPercentile":0.29257,"ingestedAt":"2026-07-13T18:57:56.955Z","slug":"CVE-2026-3029","body":"## Overview\n\nA path traversal and arbitrary file write vulnerability exist in the embedded get function in '_main_.py' in PyMuPDF version, 1.26.5.\n\n## Affected packages\n\n- `pymupdf >= 1.26.5, < 1.26.7`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `pymupdf 1.26.7`","depth":"sunlit","depthScore":28,"depthScoreParts":{"impact":27.5,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}