CVE-2026-65829: MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-09-22 · updated 2026-09-23
Weakness: CWE-22

Description

MPXJ is an open source library to read and write project plans from a variety of file formats and databases. From 7.3.0 until 16.5.0, reading a suitably crafted Primavera P3 PRX or SureTrak STX file can cause MPXJ to write files to arbitrary locations in the filesystem. This issue is fixed in version 16.5.0.

Affected products

joniles mpxj: from 7.3.0, < 16.5.0

References

https://github.com/joniles/mpxj/commit/4347315afab1ef5a2907978a754fbc5b0ff58e6f
https://github.com/joniles/mpxj/releases/tag/v16.5.0
https://github.com/joniles/mpxj/security/advisories/GHSA-7952-gx68-cjqr

Get alerted when CVE-2026-65829 or the next vulnerability affects your stack