AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

AdobeCVE-2026-48442

Adobe Content Credentials: path traversal

Adobe

CVE-2026-48442 · Published Aug 11, 2026 · updated Aug 28, 2026

High7.1
No fix yet
Adobe advisory

CAI Content Credentials is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Arbitrary file system read. An attacker could leverage this vulnerability to gain unauthorized read access to files or directories outside the intended restrictions. Exploitation of this issue does not require user interaction. Scope is changed.

Affected versions

PackageAffectedFixed in
Content Credentials Command-Line Tool
Product
<= c2patool-v0.27.5No fix yet
Content Credentials JS SDK
Product
<= @contentauth/c2pa-web@0.12.0No fix yet
Content Credentials Rust SDK
Product
<= c2pa-v0.90.5No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-22

More Adobe advisories

All Adobe