Vulnerability in Adobe Content Credentials Command-line Tool
CVE-2026-48287
CAI Content Credentials is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of th…
CVSS v3 metric
CVSS v3 base score 7.4 (High). Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N.
Affected products
- Adobe Content Credentials Command-line Tool — versions 0, c2patool-v0.26.65
- Adobe Content Credentials Js Sdk — versions 0, @contentauth/c2pa-web@0.9.0
- Adobe Content Credentials Rust Sdk — versions 0, c2pa-v0.85.2
Weakness classification (CWE)
References
- psirt@adobe.com (vendor-advisory)
Frequently asked questions
- What is CVE-2026-48287?
- CVE-2026-48287 is a high-severity vulnerability in Adobe Content Credentials Command-line Tool, classified under Untrusted Search Path. CVSS score: 7.4/10. Published 2026-07-14.
- How severe is CVE-2026-48287?
- High severity. CVSS v3 base score is 7.4 out of 10.