AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

AdobeCVE-2026-76198

Adobe C2PA Tool: improper input validation

Adobe

CVE-2026-76198 · Published Aug 25, 2026 · updated Sep 1, 2026

Medium5.5
No fix yet
Adobe advisory

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected versions

PackageAffectedFixed in
C2PA Tool
Product
<= c2patool-v0.26.70No fix yet
Content Credentials Rust SDK
Product
<= c2pa-v0.89.0No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-20

More Adobe advisories

All Adobe