PyMuPDF versions prior to 1.28.2 contain a path traversal and arbitrary file write vulnerability in the embedded get function within the _main_.py file. This flaw allows an attacker with local access to write files to arbitrary locations. The vulnerability has a CVSS 4.0 score of 6.9, indicating a medium severity. A fix is available in version 1.28.2.