CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.
Fix
Patch, vendor advisory and mitigation references on NVD 1
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 4.3 · adobeNVD modified 2026-10-15 17:55
Affected (CPE criteria) 2
cpe:2.3:a:adobe:c2pa:*:*:*:*:*:rust:*:*cpe:2.3:a:adobe:c2patool:*:*:*:*:*:*:*:*