← CVE Intelligence

CVE-2026-47922

CAI Content Credentials | Server-Side Request Forgery (SSRF) (CWE-918) PUBLISHED

Description (CNA)

CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.

Affected (CNA)

Vendor / productVersions
Adobe / Content Credentials Rust SDKaffected 0 through c2pa-v0.90.5; unaffected c2pa-v0.90.6
Adobe / Content Credentials Command-Line Toolaffected 0 through c2patool-v0.27.5; unaffected c2patool-v0.27.6
Adobe / Content Credentials JS SDKaffected 0 through @contentauth/c2pa-web@0.12.0; unaffected @contentauth/c2pa-web@0.12.1

CWE

CWE-918

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.