CVE-2026-100125: Improper Input Validation (CWE-20) in Adobe Content Credentials Rust SDK

Adobe Content Credentials Rust SDK contains an improper input validation vulnerability (CWE-20) that could be exploited to bypass security mechanisms, resulting in unauthorized write access. The exploit does not require user interaction but depends on external conditions beyond the attacker's control. The CVSS 3.1 base score is 5.9, reflecting network attack vector, high attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact.

Successful exploitation allows an attacker to bypass security features and gain unauthorized write access to the affected component. There is no impact on confidentiality or availability. The attack complexity is high, and no privileges or user interaction are required.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided at this time.