EUVD-2026-84769
GHSA-8977-v5wq-92j3
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessCraft malicious URL or compromised page
-
ExploitLure victim to interact
-
ExecutionMalformed input bypasses input validation
-
ImpactAchieve limited unauthorized write (integrity tampering)
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A05:2025 - Injection
ASVS 5.0
V2 - Validation and Business Logic Input validation, allowlisting
|
| Exploitation Conditions | Exploitation requires victim user interaction (UI:R): a user of the Adobe Content Credentials Rust SDK or command-line tool must visit a maliciously crafted URL or interact with a compromised web page that supplies malformed input to the vulnerable validation logic. No authentication is required (PR:N) and the attack is network-reachable (AV:N), but the dependency on tricking a victim into the interaction is the primary limiting factor. Impact is confined to limited unauthorized write/integrity tampering (I:L) with no data disclosure or denial of service; a fixed version is not stated in the advisory. |
| Impact | This is a genuinely LOW-priority issue whose 4.3 MEDIUM/LOW score is appropriately modest and not inflated. The CVSS vector (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) describes an unauthenticated, low-complexity network attack that nonetheless hinges on victim user interaction and delivers only limited integrity impact - no confidentiality loss (C:N), no availability loss (A:N), and only partial write/integrity impact (I:L). No EPSS score, no CISA KEV listing, and no public proof-of-concept are provided in the input, so exploitation status is: no public exploit identified at time of analysis. There is no SSVC decision data supplied. The signals are internally consistent: a self-reported Adobe advisory (APSB26-147) for a security-feature-bypass with narrow impact, no evidence of exploitation, and a small deployment footprint. The one labeling conflict is the 'Authentication Bypass' tag, which is inconsistent with the CWE-20 improper-input-validation / security-feature-bypass framing in the description - treat that tag as mislabeled, not as evidence of an auth-bypass primitive. Net: real but low urgency; prioritize normal patch cycles over emergency response. |
| Exploit ScenarioDerived | An attacker crafts a malicious URL or booby-traps a web page and lures a user of the Content Credentials Rust SDK / CLI tooling into visiting or interacting with it. The malformed input bypasses a security validation check, letting the attacker perform limited unauthorized writes (integrity tampering) within the affected component. No public proof-of-concept is available, and the requirement for victim interaction meaningfully limits opportunistic exploitation. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Sep 22, 2026
Improper input validation in Adobe Content Credentials - covering both the Content Credentials Rust SDK and the Content Credentials command-line tool - lets a remote attacker bypass security checks and obtain limited unauthorized write access when a victim visits a maliciously crafted URL or interacts with a compromised web page that supplies malformed input. It carries a 4.3 score (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N), an on-the-low-end rating driven by the required victim interaction and the integrity-only, limited impact with no confidentiality or availability loss. There is no public exploit identified at time of analysis and the issue is not listed in CISA KEV; the Adobe advisory cited as the reference does not state a fixed version.
RemediationAI
No vendor-released patch identified at time of analysis: security bulletin APSB26-147 (https://helpx.adobe.com/security/products/content-authenticity-sdk/apsb26-147.html) does not state a fixed version, so the concrete action is to track that advisory and upgrade both the Content Credentials Rust SDK dependency and any installed Content Credentials command-line tool as soon as Adobe publishes a patched release, then re-verify the fix in your own build. Until then, apply targeted compensating controls: avoid processing untrusted or attacker-supplied C2PA manifests, media, or URLs with the SDK and CLI outside of a sandbox; run the command-line tool with least privilege against a read-only or disposable filesystem where credential signing output is not required (the trade-off being that legitimate Content Credentials write/sign operations will fail until you re-enable write access on a trusted path); and block or quarantine suspicious links at the email and web gateway layers, since exploitation requires the victim to visit the crafted URL or compromised page. Because the assessed impact is limited unauthorized write/integrity tampering with no data disclosure or denial of service, prioritizing these input-restriction and sandboxing measures over emergency patching is reasonable while awaiting the Adobe fix.
Affected VersionsENISA
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The root cause is CWE-20 (Improper Input Validation): the affected Content Credentials components accept input and process it without adequately validating it before the value is used in a security decision, so the check that is supposed to enforce a security property can be satisfied or short-circuited by crafted input - a classic security feature bypass rather than memory corruption or code execution. The CPE data identifies two distinct Adobe deliverables in scope: the Content Credentials Rust SDK (cpe:2.3:a:adobe:content_credentials_rust_sdk) and the Content Credentials command-line tool (cpe:2.3:a:adobe:content_credentials_command-line_tool), both with wildcard version fields, meaning the feed does not pin a specific vulnerable release. Content Credentials is the implementation of the C2PA provenance/authenticity standard, which parses manifests and metadata attached to media and verifies their signatures and assertions; malformed or hostile input reaching that validation path is the plausible attack surface here. The C2PA tooling is also commonly embedded in creative and publishing workflows, so the SDK and CLI are frequently consuming untrusted content files and URLs - consistent with the UI:R requirement in the assessed vector, where the user must be induced to open the crafted URL or page.
Know when Content Credentials Rust Sdk gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Network-reachable, low-complexity, no auth (PR:N) but gated on victim interaction (UI:R); impact limited to partial integrity write (I:L) with no confidentiality or availability effect.
Primary rating from Vendor (adobe).
CVSS VectorVendor: adobe
DescriptionCVE.org
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
More in Content Credentials Rust Sdk
View allDenial of service in Adobe Content Credentials - the Content Authenticity Initiative (CAI) Rust SDK (c2pa-rs) and its as
Improper input validation in Adobe's Content Credentials Rust SDK and its companion command-line tool lets unauthenticat
Improper input validation in Adobe's CAI Content Credentials tooling - spanning both the C2PA Tool and the Content Crede
Integer underflow in Adobe's Content Credentials Rust SDK and C2PA Tool allows unauthenticated remote attackers to crash
Uncontrolled resource consumption in Adobe's Content Credentials ecosystem - specifically the c2pa_tool and Content Cred
Improper input validation in Adobe CAI Content Credentials (the Rust SDK and the command-line tool) lets remote, unauthe
Integer underflow (CWE-191) in Adobe's Content Credentials Rust SDK and C2PA Tool crashes the application when processin
Integer underflow in Adobe's Content Credentials Rust SDK and c2pa_tool allows a local attacker to crash the application
Integer overflow in Adobe's CAI Content Credentials Rust SDK and Content Credentials command-line tool crashes applicati
Processing a maliciously crafted C2PA / Content Credentials asset through the CAI (Content Authenticity Initiative) Cont
Arbitrary file system read in Adobe's Content Credentials (C2PA Tool and Content Credentials Rust SDK) exposes sensitive
Improper input validation in Adobe Content Credentials - specifically the Content Credentials Rust SDK and its companion
Exploit-DB