EUVD-2026-56275
GHSA-xcjm-f85q-hxq7
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
AV:L because processing occurs locally; PR:N since attacker delivers a crafted file without needing system access; UI:R mandatory; C:H for arbitrary read; no integrity or availability impact.
Primary rating from Vendor (adobe).
CVSS VectorVendor: adobe
Lifecycle Timeline
1DescriptionCVE.org
CAI Content Credentials is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.
AnalysisAI
Path traversal in Adobe's CAI Content Credentials ecosystem - spanning the Rust SDK (c2pa-v0.90.5 and earlier), the JavaScript/Web SDK (@contentauth/c2pa-web@0.12.0 and earlier), and the c2patool command-line utility (v0.27.5 and earlier) - enables arbitrary file system reads outside the intended access scope. The flaw is triggered when a victim processes a maliciously crafted file or visits a compromised web page that causes the SDK to resolve attacker-controlled path sequences. No active exploitation has been confirmed (not in CISA KEV), and no public exploit code has been identified at time of analysis; patched releases exist for all three components.
Technical ContextAI
CWE-22 (Improper Limitation of a Pathname to a Restricted Directory) describes failures to sanitize path components such as '../' sequences before resolving them against the file system. The C2PA (Coalition for Content Provenance and Authenticity) standard embeds provenance metadata - content credentials - directly into media files or associated manifests. The affected components (c2pa Rust crate, @contentauth/c2pa-web JS SDK, and c2patool CLI) parse these manifests and, due to insufficient path validation, can be directed by attacker-controlled manifest data to read files outside the intended working directory. The CVSS AV:L vector reflects that exploitation occurs on the local machine processing the crafted content - whether via CLI invocation or browser-side JS SDK execution. Affected CPE entries correspond to the c2pa Rust crate up to 0.90.5, the contentauth/c2pa-web npm package up to 0.12.0, and c2patool up to 0.27.5.
RemediationAI
Upgrade to the patched releases immediately: c2pa-v0.90.6 for the Rust SDK, @contentauth/c2pa-web@0.12.1 for the JavaScript SDK, and c2patool-v0.27.6 for the command-line tool. Full details and download links are available in Adobe Security Bulletin APSB26-111 at https://helpx.adobe.com/security/products/content-authenticity-sdk/apsb26-111.html. If immediate patching is not possible, restrict the SDK or CLI to processing only content from trusted, internal sources and block ingestion of externally supplied C2PA manifests - note that this trade-off eliminates the core provenance-verification use case for third-party content. For automated pipelines, sandbox the c2patool process using OS-level controls (e.g., seccomp profiles, chroot jails, or containerization with a read-only file system mount restricted to the intended working directory) to limit the blast radius of a successful traversal.
Server-Side Request Forgery in Adobe's C2PA (Content Credentials) SDK family - the Rust SDK (c2pa), the Node.js web SDK
Uncontrolled resource consumption in Adobe's CAI Content Credentials SDK enables remote unauthenticated attackers to exh
Null pointer dereference in Adobe's Content Credentials SDKs (Rust SDK ≤c2pa-v0.90.5, JS SDK ≤@contentauth/c2pa-web@0.12
Denial-of-service in Adobe's C2PA / Content Credentials SDKs allows a remote attacker to crash any application built on
Denial-of-service in Adobe's Content Credentials (C2PA) SDK ecosystem lets a remote attacker crash any application that
Credential disclosure in Adobe's CAI Content Credentials (C2PA) tooling - spanning the Rust SDK (c2pa ≤0.84.0), the JS S
Arbitrary code execution in Adobe's Content Authenticity (CAI) Content Credentials tooling — the c2pa Rust SDK (≤0.84.0)
Path traversal in Adobe's Content Credentials toolkit - spanning the c2patool CLI, the c2pa Rust SDK, and the @contentau
Security feature bypass in Adobe's Content Credentials (C2PA) SDKs - the Rust SDK (≤0.84.0), JavaScript SDK (≤0.7.0), an
Improper input validation across Adobe's Content Credentials JS SDK, Rust SDK, and command-line tool allows a remote una
Integer overflow in Adobe's CAI Content Credentials SDK family (Rust, JavaScript, and CLI) allows a local attacker to cr
Integer overflow in Adobe's Content Credentials ecosystem - spanning the Rust SDK (c2pa ≤ v0.90.5), JavaScript SDK (@con
Same weakness CWE-22 – Path Traversal
View allSame technique Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today