CVE-2026-34632 is an Uncontrolled Search Path Element vulnerability in the Adobe Photoshop Installer. This vulnerability allows an attacker to execute arbitrary code by placing a malicious library in a directory that the installer searches during execution. Successful exploitation requires the user to run the installer, thus involving user interaction. The vulnerability affects the security scope, potentially impacting confidentiality, integrity, and availability of the affected system. The CVSS v3.1 base score is 8.6, indicating high severity. No official patch or remediation level has been provided by Adobe as of the published date.

If exploited, this vulnerability can lead to arbitrary code execution in the context of the current user running the installer. This can result in full compromise of the user's privileges, affecting confidentiality, integrity, and availability of the system. However, exploitation requires user interaction, limiting the attack vector to scenarios where the victim runs the compromised installer.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should avoid running untrusted or modified installers and ensure installers are obtained from official sources. Monitor Adobe's security advisories for updates on patches or mitigations.