Vulnerability · Published Mar 19, 2026 · Assigned by certcc
CVE-2026-3029CVE-2026-3029
High 7.5
In plain English
A high-severity path traversal in PyMuPDF from Artifex Software Inc. *PyMuPDF*. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 32% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.4%top 68.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A path traversal and arbitrary file write vulnerability exist in the embedded get function in '_main_.py' in PyMuPDF version, 1.26.5.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | pymupdf | no fix listed | DEBIAN-CVE-2026-3029 |
| Debian:13 | pymupdf | 1.25.4+ds1-3+deb13u1 | DEBIAN-CVE-2026-3029 |
| Debian:14 | pymupdf | 1.26.7+ds1-1 | DEBIAN-CVE-2026-3029 |
| PyPI | pymupdf | 1.26.7 | GHSA-cxqh-p2w9-fmr7 |
| PyPI | pymupdf | 1.26.7 | PYSEC-2026-3001 |
| Ubuntu:22.04:LTS | pymupdf | no fix listed | UBUNTU-CVE-2026-3029 |
| Ubuntu:24.04:LTS | pymupdf | no fix listed | UBUNTU-CVE-2026-3029 |
| Ubuntu:25.10 | pymupdf | no fix listed | UBUNTU-CVE-2026-3029 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Artifex Software Inc. *PyMuPDF* | PyMuPDF | 1.26.5 – before 1.26.7 |
Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
- http://github.com/pymupdf/PyMuPDF
- http://github.com/pymupdf/PyMuPDF/commit/603cafe38a183b8bab34f16d05043b4185d8d40a
- https://www.kb.cert.org/vuls/id/504749
- https://access.redhat.com/security/cve/CVE-2026-3029 vdb-entry, x_refsource_REDHAT
- RHBZ#2449054 issue-tracking, x_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3029.json x_sadp-csaf-vex