Content Credentials SDK CVE-2026-95633

Exploitation requires a deployment that relies on the CAI Content Credentials SDK to cryptographically verify signatures/claims on content credentials and make trust or write-authorization decisions based on that verification. The core prerequisite is that the attacker can supply content or a token (per the 'Jwt Attack' tag) with a forged or tampered signature to the verification path; the flaw lies in that verifier accepting it. Per the CVSS vector (PR:N/UI:N/AC:L), no authentication, no user interaction, and no special non-default configuration are stated as required, and the attack is network-reachable. The practical limiting factor is scope of use: only systems that actually consume this SDK for signature validation as a security control are exposed, and impact is confined to integrity (no data disclosure or service disruption).

This is a genuine integrity-focused issue but not an acute emergency. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N, base 7.5) describes a remote, unauthenticated, low-complexity attack with no user interaction and HIGH integrity impact, with zero confidentiality or availability impact - fully consistent with a cryptographic signature-verification bypass (CWE-347) that yields unauthorized write/forgery capability. No EPSS score, KEV listing, POC reference, or SSVC decision data was provided in the input, so exploitation likelihood cannot be quantified from the intelligence available - absence of these signals is not evidence of low risk, only of missing telemetry. The vulnerability was reported through Adobe PSIRT (psirt@adobe.com) and is documented in Adobe advisory APSB26-163, which is a credible first-party source. Net assessment: treat as a real, patch-worthy integrity vulnerability for any deployment relying on Content Credentials for provenance/trust decisions, but its real-world priority is bounded by the fairly specialized footprint of the SDK and by the lack of any confirmed exploitation or public exploit code at the time of analysis.

An attacker crafts content bearing a forged or manipulated cryptographic signature (the 'Jwt Attack' tag suggests a token/claim-forgery technique) and submits it to a system using the CAI Content Credentials SDK. Because the SDK improperly verifies the signature, the forged credential is accepted as authentic, letting the attacker gain unauthorized write access and falsify provenance metadata remotely without authentication or user interaction. No public exploit code was identified in the provided intelligence.