Path Traversal Vulnerability in CAI Content Credentials by Adobe
CVE-2026-48446

5.5MEDIUM

Key Information:

Vendor

Adobe
Status
Content Credentials Rust Sdk
Content Credentials Command-line Tool
Content Credentials Js Sdk
Vendor
CVE Published:
11 August 2026

What is CVE-2026-48446?

The CAI Content Credentials by Adobe is exposed to a Path Traversal vulnerability, which allows unauthorized access to sensitive files and directories beyond the authorized scope. This vulnerability necessitates user interaction, enabling attackers to exploit it by luring victims to visit specially crafted URLs or compromised web pages. When exploited, this could lead to serious data exposure risks, prompting users to ensure they are safeguarded against such attacks.

Affected Version(s)

Content Credentials Command-Line Tool 0

Content Credentials Command-Line Tool 0

Content Credentials JS SDK 0

References

https://helpx.adobe.com/security/products/content-authent...
vendor-advisory

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.