← CVE Intelligence

CVE-2026-48312

CAI Content Credentials | Improper Input Validation (CWE-20) PUBLISHED

Description (CNA)

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.

Affected (CNA)

Vendor / productVersions
Adobe / Content Credentials Rust SDKaffected 0 through c2pa-v0.84.0; unaffected c2pa-v0.85.2
Adobe / Content Credentials Command-Line Toolaffected 0 through c2patool-v0.16.5; unaffected c2patool-v0.26.65
Adobe / Content Credentials JS SDKaffected 0 through @contentauth/c2pa-web@0.7.0; unaffected @contentauth/c2pa-web@0.9.0

CWE

CWE-20

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.