CVE-2026-19480 — CAI Content Credentials | Improper Input Validation (CWE-20)

CVE-2026-19480

CAI Content Credentials | Improper Input Validation (CWE-20) PUBLISHED

Description (CNA)

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.

Affected (CNA)

Vendor / product	Versions
Adobe / Content Credentials Rust SDK	affected 0 through c2pa-v0.89.2; unaffected c2pa-v0.90.17
Adobe / Content Credentials Command-Line Tool	affected 0 through c2patool-v0.26.70; unaffected c2patool-v0.27.17

CWE

CWE-20

References

https://helpx.adobe.com/security/products/content-authenticity-sdk/apsb26-147.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.