5.5Media

CVE-2026-123267CAI Content Credentials | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

Adobe Content Credentials Rust SDK; Adobe C2PA Tool Publicada: (hace 3 días)

Descripción

CAI Content Credentials is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access unauthorized files or directories outside the intended restrictions. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.

Debilidad (CWE): CWE-22

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
Adobe C2PA Tool ≤ c2patool-v0.28.5, fixed c2patool-v0.28.6
Adobe Content Credentials Rust SDK ≤ c2pa-v0.91.10, fixed c2pa-v0.91.11

Referencias y parches