Skip to content
AdobeCVE-2026-76198

Adobe C2PA Tool: improper input validation

Medium5.5CVE-2026-76198 · Published Aug 25, 2026 · updated Sep 1, 2026

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Adobe advisory

Affected versions

PackageAffectedFixed in
C2PA Tool
Product
<= c2patool-v0.26.70No fix yet
Content Credentials Rust SDK
Product
<= c2pa-v0.89.0No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-20

More Adobe advisories

All Adobe
Advisory
Adobe Campaign Classic: command injection
Critical10.0Aug 25
Adobe Substance3D - Painter: untrusted search path
High7.8Aug 25
Adobe Substance3D - Painter: heap buffer overflow
High7.8Aug 25
Adobe Substance3D - Painter: out-of-bounds write
High7.8Aug 25
Adobe C2PA Tool: integer overflow
Medium6.2Aug 25
Adobe Campaign Classic: server-side request forgery
Critical10.0Aug 25

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.