CVE-2026-103845 — Dimension | Uncontrolled Search Path Element (CWE-427)

CVE-2026-103845

Dimension | Uncontrolled Search Path Element (CWE-427) PUBLISHED

Description (CNA)

Dimension is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A local attacker with user permissions could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must run the application. Scope is changed.

Affected (CNA)

Vendor / product	Versions
Adobe / Adobe Dimension	affected 0 through 4.1.8; unaffected 4.1.9

CWE

CWE-427

References

https://www.adobe.com/trust/security/products/dimension/apsb26-171.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.