CVE-2022-41954

CVE-2022-41954 is a low-severity information disclosure vulnerability affecting MPXJ, an open-source library for project plan manipulation. On Unix-like systems, MPXJ creates temporary files with overly permissive read access, allowing other local users to read sensitive schedule data being processed. The vulnerability has a CVSS score of 3.3 (LOW) and requires local access and low privileges, with the primary impact being confidentiality loss. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.