CVE-2026-34678 describes an Uncontrolled Resource Consumption vulnerability in Adobe CAI Content Credentials affecting versions [email protected], c2pa-v0.78.2, and earlier. The vulnerability allows an attacker to cause application denial-of-service by exhausting system resources. Exploitation does not require user interaction. The CVSS 3.1 vector indicates local attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, but high availability impact. No vendor advisory or patch information is currently available.

Successful exploitation results in denial-of-service of the affected application due to resource exhaustion. There is no impact on confidentiality or integrity. The attack can be performed locally without privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider limiting resource usage and monitoring application behavior to detect potential exploitation attempts.