Server-Side Request Forgery Vulnerability in Adobe CAI Content Credentials
CVE-2026-48290

8.2HIGH

Key Information:

Vendor

Adobe
Status
Content Credentials Rust Sdk
Content Credentials Command-line Tool
Content Credentials Js Sdk
Vendor
CVE Published:
14 July 2026

What is CVE-2026-48290?

Adobe's CAI Content Credentials is impacted by a Server-Side Request Forgery (SSRF) vulnerability that enables attackers to manipulate requests sent from the server, potentially resulting in arbitrary code execution with the privileges of the current user. To exploit this flaw, an attacker may require the victim to visit a specifically designed URL or interact with a compromised web page, increasing the risk of unauthorized access and control over user accounts or sessions. This vulnerability demands immediate attention to safeguard user data and ensure secure interactions within the application.

Affected Version(s)

Content Credentials Command-Line Tool 0

Content Credentials Command-Line Tool 0

Content Credentials JS SDK 0

References

https://helpx.adobe.com/security/products/content-authent...
vendor-advisory

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.