AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

AdobeCVE-2026-48287

Adobe Content Credentials: untrusted search path

Adobe

CVE-2026-48287 · Published Jul 14, 2026 · updated Aug 28, 2026

High7.4
No fix yet
Adobe advisory

CAI Content Credentials is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.

Affected versions

PackageAffectedFixed in
Content Credentials Command-Line Tool
Product
<= c2patool-v0.16.5No fix yet
Content Credentials JS SDK
Product
<= @contentauth/c2pa-web@0.7.0No fix yet
Content Credentials Rust SDK
Product
<= c2pa-v0.84.0No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-426

More Adobe advisories

All Adobe