← CVE Intelligence

CVE-2026-48295

CAI Content Credentials | Insufficiently Protected Credentials (CWE-522) PUBLISHED

Description (CNA)

CAI Content Credentials is affected by an Insufficiently Protected Credentials vulnerability that could result in disclosure of sensitive information. An attacker could leverage this vulnerability to gain unauthorized read access. Exploitation of this issue does not require user interaction.

Affected (CNA)

Vendor / productVersions
Adobe / Content Credentials Rust SDKaffected 0 through c2pa-v0.84.0; unaffected c2pa-v0.85.2
Adobe / Content Credentials Command-Line Toolaffected 0 through c2patool-v0.16.5; unaffected c2patool-v0.26.65
Adobe / Content Credentials JS SDKaffected 0 through @contentauth/c2pa-web@0.7.0; unaffected @contentauth/c2pa-web@0.9.0

CWE

CWE-522

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.