The vulnerability identified as CVE-2026-3029 affects PyMuPDF version 1.26.5. It is a CWE-22 path traversal issue in the embedded get function in _main_.py, which allows arbitrary file write operations outside of restricted directories. The CVSS v3.1 score is 7.5, indicating high severity with network attack vector, low attack complexity, no privileges or user interaction required, and an impact on availability only. Vendor advisories from Red Hat and CERT are available but do not explicitly confirm patch availability or remediation steps.

Successful exploitation of this vulnerability can lead to arbitrary file writes outside the intended directory, which may cause denial of service or other availability impacts. There is no indication of confidentiality or integrity impact. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no explicit patch or fix is mentioned in the provided advisories, users should monitor the official vendor advisories from Red Hat and CERT for updates. Until a fix is available, avoid using version 1.26.5 in untrusted environments or apply manual mitigations if possible to restrict file write permissions.