Denial-of-Service Vulnerability in CAI Content Credentials by Adobe
CVE-2026-89277

5.5MEDIUM

Key Information:

Vendor

Adobe
Status
Content Credentials Rust Sdk
Content Credentials Command-line Tool
Vendor
CVE Published:
22 September 2026

What is CVE-2026-89277?

The CAI Content Credentials product from Adobe is impacted by an Integer Overflow or Wraparound vulnerability that can lead to a denial-of-service condition. This issue can be exploited by an attacker through user interaction, requiring the victim to visit a specially crafted URL or engage with a compromised webpage, potentially resulting in application crashes.

Affected Version(s)

Content Credentials Command-Line Tool 0

Content Credentials Rust SDK 0

Content Credentials Command-Line Tool c2patool-v0.27.17

References

https://helpx.adobe.com/security/products/content-authent...
vendor-advisory

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.