Untrusted Search Path Vulnerability in Adobe Framemaker

CVE-2026-27290

What is CVE-2026-27290?

Adobe Framemaker versions 2022.8 and earlier are susceptible to an untrusted search path vulnerability, enabling attackers to potentially execute arbitrary code within the context of the current user. By manipulating the application's search path for critical system resources, malicious actors can redirect this path to a harmful executable. Notably, this exploitation can occur without any user interaction, posing significant risks to users' systems and data integrity. Security measures should be taken to mitigate vulnerabilities associated with search path configurations.

References