Content Credentials SDK CVE-2026-48312

Exploitation requires local access to a system where the Adobe c2pa Rust SDK (≤0.84.0), c2pa-web JS SDK (≤0.7.0), or c2patool CLI (≤0.16.5) is installed and actively processing C2PA manifests, consistent with CVSS AV:L. No system-level privileges are required per CVSS PR:N - the attacker need only be able to supply a crafted manifest as input to the SDK or tool. No user interaction is required (UI:N). The attack is not automatable at scale per SSVC, indicating the exploitation pathway requires deliberate targeting of a specific content processing pipeline rather than opportunistic mass exploitation. Deployments that do not process externally-influenced or attacker-controlled C2PA manifests have significantly reduced exposure. The absence of a network attack vector means internet-exposed services alone are not directly at risk unless they accept and process C2PA manifests from untrusted parties.

The CVSS 6.8 vector (AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N) presents a notable tension: local attack vector (AV:L) limits exposure to systems where an attacker already has local access, yet PR:N indicates no system-level privileges are needed - a combination that narrows opportunity but does not require credential theft to exploit. High integrity impact (I:H) reflects the ability to forge or overwrite content authenticity assertions, which carries outsized trust consequences in media and publishing pipelines beyond what the CVSS base score alone conveys. EPSS at 0.16% (6th percentile) and SSVC 'Exploitation: none / Automatable: no' both corroborate a low-urgency risk posture, and no public proof-of-concept or KEV listing exists. The 'Automatable: no' designation further indicates mass exploitation at scale is infeasible. Real-world risk is therefore low for most environments but potentially significant for targeted attacks on content authenticity pipelines at news agencies, media organizations, or digital asset management systems where forged provenance data could have downstream reputational or regulatory consequences.

A local attacker with access to a host running an unpatched c2pa Rust SDK, c2pa-web JS SDK, or c2patool instance crafts a specially malformed C2PA manifest designed to pass validation checks without proper authorization. Supplying this manifest to a content credentialing workflow triggers the input validation bypass, granting the attacker unauthorized write access to embed or alter provenance assertions in digital media without valid cryptographic authority. No public proof-of-concept exploit code exists at time of analysis.