Uncontrolled Search Path Element Vulnerability in Adobe Photoshop

CVE-2025-21127

What is CVE-2025-21127?

Adobe Photoshop Desktop versions 25.12, 26.1, and earlier are susceptible to an Uncontrolled Search Path Element vulnerability. This security flaw enables an attacker to alter the search path environment variable to direct it towards a malicious library. When the vulnerable application is executed, it may load this malicious library and execute arbitrary code, potentially compromising system integrity. Exploitation of this vulnerability requires user interaction, as the user must open the affected application.

References