Content Credentials CVE-2026-102501

Exploitation requires an application or pipeline that ingests attacker-supplied content/manifests through a vulnerable version of the Content Credentials components (c2pa-rs ≤ v0.90.15, c2patool ≤ v0.27.15, or @contentauth/c2pa-web ≤ 0.13.4); the vulnerable input-validation path is the C2PA content/manifest parsing-and-verification logic. Per the CVSS vector (AV:N/AC:L/PR:N/UI:N) no authentication and no user interaction are needed against default use. The principal LIMITING factors are: exposure exists only where untrusted content is actually processed by the SDK/tool, and impact is bounded to limited-integrity write access (I:L) with no data disclosure (C:N) and no availability loss (A:N), so a successful attack tampers with provenance/write state rather than fully compromising the host.

This is a MEDIUM-severity issue (CVSS 5.3) that signals support treating as a moderate, not top-tier, priority. The vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N shows a genuinely favorable attack profile for an adversary - network-reachable, low complexity, no privileges, no user interaction - but the impact is deliberately narrow: integrity-only and LOW (I:L), with zero confidentiality (C:N) and zero availability (A:N) effect. The 'unauthorized limited write access' in the description is consistent with that I:L rating, so the easy-to-reach but low-consequence nature is what caps the score at medium. No EPSS probability was provided in the input, so exploitation likelihood cannot be quantified. There is no CISA KEV listing and no public exploit referenced, so exploitation status is: no public exploit identified at time of analysis. No SSVC decision data (exploitation/automatable/technical-impact) was supplied. Signals are therefore consistent rather than conflicting - an easily reachable but low-impact bypass - but several key risk inputs (EPSS, SSVC, POC status) are simply MISSING from the data and should be checked before final prioritization.

An attacker submits crafted content or a manipulated C2PA manifest to an application that processes it through the vulnerable Content Credentials SDK/tool. Because input validation is incomplete, the attacker bypasses a content-credential security check and obtains limited unauthorized write access without any user interaction. No public exploit code is identified at time of analysis.