What is CVE-2026-48290?

CVE-2026-48290 is a high-severity vulnerability in Adobe Content Credentials Command-line Tool, classified under Server-Side Request Forgery (SSRF). CVSS score: 8.2/10. Published 2026-07-14.

How severe is CVE-2026-48290?

High severity. CVSS v3 base score is 8.2 out of 10.

SSRF in Adobe Content Credentials Command-line Tool

CVE-2026-48290

CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to inject malicious sc…

Vulnerability class: SSRF (Server-Side Request Forgery)

CVSS v3 metric

CVSS v3 base score 8.2 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N.

Affected products

Adobe Content Credentials Command-line Tool — versions 0, c2patool-v0.26.65
Adobe Content Credentials Js Sdk — versions 0, @contentauth/c2pa-web@0.9.0
Adobe Content Credentials Rust Sdk — versions 0, c2pa-v0.85.2

Weakness classification (CWE)

CWE-918 — Server-Side Request Forgery (SSRF)

References

psirt@adobe.com (vendor-advisory)

Frequently asked questions

What is CVE-2026-48290?: CVE-2026-48290 is a high-severity vulnerability in Adobe Content Credentials Command-line Tool, classified under Server-Side Request Forgery (SSRF). CVSS score: 8.2/10. Published 2026-07-14.
How severe is CVE-2026-48290?: High severity. CVSS v3 base score is 8.2 out of 10.