CVE-2026-82035 | PyMuPDF up to 1.28.2 Font Branch src/main.py extract_objects path traversal

September 14, 2026 Yanac

A vulnerability has been found in PyMuPDF up to 1.28.2 and classified as critical. Affected by this issue is the function extract_objects of the file src/__main__.py of the component Font Branch. The manipulation leads to path traversal.

This vulnerability is traded as CVE-2026-82035. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to apply a patch to fix this issue.VulDB Recent EntriesRead More