PT-2026-48281 · Adobe · Cai Content Credentials

Published 2026-06-09 · Updated 2026-06-09 · CVE-2026-34657

Mitre

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in an arbitrary file system write. An attacker could leverage this vulnerability to write to unauthorized files or directories outside of intended restrictions. Exploitation of this issue requires user interaction in that a victim must extract a maliciously crafted file.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-34657

Affected Products

Cai Content Credentials

References · 2

• https://helpx.adobe.com/security/products/content-authenticity-sdk/apsb26-61.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-34657 · Security Note