EUVD-2026-49949
GHSA-x7vg-5fch-cgr8
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessCraft malicious file with path traversal payload
-
DeliveryDistribute file to victim (email, download)
-
ExploitVictim opens file in Adobe Bridge
-
ExecutionPath traversal allows arbitrary file read outside intended directories
-
ImpactSensitive data exfiltrated or further compromise leveraged via read information
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V5 - File Handling Path canonicalization, traversal prevention
MITRE ATT&CK
2 techniques across 2 tactics: Discovery, Collection The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Victim must manually open a malicious file using an affected version of Adobe Bridge. No authentication is required, but local access to the application on the target machine is necessary. User interaction is the sole limiting factor, as the vulnerability is triggered at file-open time and does not require elevated privileges or non-default configurations. |
| Impact | CVSS 3.1 score of 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) indicates high confidentiality, integrity, and availability impact with a local attack vector and required user interaction. EPSS data is missing, but the SSVC assessment (exploitation: none, automatable: no, technical impact: total) downgrades urgency. While the impact is total, the requirement for victim interaction and the absence of known exploits or active attacks make this a lower-priority risk relative to its CVSS score. No KEV listing is present, reinforcing that exploitation is theoretical rather than observed. |
| Exploit ScenarioDerived | An attacker crafts a malicious file (e.g., a specially modified .bridge project or image file) that contains path traversal payloads. The file is delivered to a victim via email or download. When the victim opens it with a vulnerable Adobe Bridge, the traversal is triggered, enabling the attacker to read arbitrary files from the victim’s system, such as configuration files or credentials. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Jul 29, 2026
Path traversal in Adobe Bridge allows local attackers to read arbitrary files from the victim's file system when a crafted malicious file is opened. Affected versions include all releases up to 15.1.6 and 16.0.5. No active exploitation or public PoC has been identified at this time, and the vendor has issued a fix via APSB26-89.
RemediationAI
Update Adobe Bridge to the latest patched version provided in Adobe Security Bulletin APSB26-89. If immediate patching is not possible, avoid opening untrusted files in Bridge, and consider restricting Bridge's file system access through OS-level permissions or running it in a sandboxed environment. Disabling automatic file preview or restricting use to trusted file sources reduces exposure, but these measures do not eliminate the underlying flaw.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
Adobe Bridge is a digital asset management application that handles various file types; it suffers from an Improper Limitation of a Pathname to a Restricted Directory (CWE-22). The vulnerability likely arises from insufficient sanitization of file paths embedded in project or asset files, enabling traversal sequences like '../' to escape the intended directory scope. According to CPE data, all versions of Adobe Bridge for all platforms are affected.
Know when Adobe Bridge gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Local attack vector requiring user interaction; low complexity; high impact on confidentiality, integrity, and availability.
Primary rating from Vendor (adobe).
CVSS VectorNVD
DescriptionNVD
Bridge is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Path traversal exploits occur when applications use user-controlled input to construct file system paths without proper validation.
More in Adobe Bridge
View allArbitrary code execution in Adobe Bridge up to versions 15.1.6 and 16.0.5 occurs via an untrusted search path vulnerabil
Arbitrary code execution in Adobe Bridge via a malicious file opened by a victim. An incorrect authorization flaw allows
Arbitrary code execution in Adobe Bridge 16.x (through 16.0.5) and 15.x (through 15.1.6) stems from an untrusted search
Privilege escalation in Adobe Bridge allows unauthorized read and write access via a malicious file opened by a victim.
Opening a crafted file in Adobe Bridge can trigger a heap-based buffer overflow that results in arbitrary code execution
Stack-based buffer overflow in Adobe Bridge lets a crafted file achieve arbitrary code execution with the privileges of
Heap-based buffer overflow in Adobe Bridge lets an attacker execute arbitrary code in the context of the current user wh
Arbitrary code execution in Adobe Bridge occurs when a victim opens a specially crafted file, allowing attacker-controll
Out-of-bounds write (CWE-787) in Adobe Bridge allows an attacker to achieve arbitrary code execution in the context of t
Out-of-bounds write in Adobe Bridge can be triggered when a user opens or previews a maliciously crafted file, allowing
Arbitrary code execution in Adobe Bridge is possible when a victim opens a maliciously crafted file that triggers a heap
Arbitrary code execution in Adobe Bridge allows an attacker to run code in the context of the current user by tricking a
Exploit-DB