---
id: CVE-2026-3029
aliases:
  - GHSA-cxqh-p2w9-fmr7
  - PYSEC-2026-3001
title: PyMuPDF has a path traversal in _main_.py
summary: PyMuPDF has a path traversal in _main_.py
severity: medium
vendor: pymupdf
product: pymupdf
ecosystem: pip
affected:
  - 'pymupdf >= 1.26.5, < 1.26.7'
patched:
  - pymupdf 1.26.7
published: '2026-03-19'
updated: '2026-07-13'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-cxqh-p2w9-fmr7'
references:
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-3029'
  - url: 'https://github.com/pymupdf/PyMuPDF'
  - url: 'https://www.kb.cert.org/vuls/id/504749'
  - url: 'http://github.com/pymupdf/PyMuPDF'
  - url: >-
      http://github.com/pymupdf/PyMuPDF/commit/603cafe38a183b8bab34f16d05043b4185d8d40a
tags:
  - osv
  - pip
epss: 0.0041
epssPercentile: 0.32385
ingestedAt: '2026-07-13T18:57:56.955Z'
---

## Overview

A path traversal and arbitrary file write vulnerability exist in the embedded get function in '_main_.py' in PyMuPDF version, 1.26.5.

## Affected packages

- `pymupdf >= 1.26.5, < 1.26.7`

## Remediation

Upgrade to a patched release:

- `pymupdf 1.26.7`