Medium severity · published Sep 22, 2026
CVE-2026-65829
MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers
5.3
CVSS
0.4%
EPSS
No
On KEV
Description
MPXJ is an open source library to read and write project plans from a variety of file formats and databases. From 7.3.0 until 16.5.0, reading a suitably crafted Primavera P3 PRX or SureTrak STX file can cause MPXJ to write files to arbitrary locations in the filesystem. This issue is fixed in version 16.5.0.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 37% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MP
mpxj · joniles
>= 7.3.0, < 16.5.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-65829
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-65829
github.com
https://github.com/joniles/mpxj/commit/4347315afab1ef5a2907978a754fbc5b0ff58e6f
github.com
https://github.com/joniles/mpxj/releases/tag/v16.5.0
github.com
https://github.com/joniles/mpxj/security/advisories/GHSA-7952-gx68-cjqr
More from mpxj
7.5
CVE-2026-61570
MPXJ: XXE Vulnerability in MerlinReader
5.3
CVE-2024-49771
MPXJ has a Potential Path Traversal Vulnerability