CVE-2026-34689 is a path traversal vulnerability in Adobe Connect that improperly limits pathnames to restricted directories. This flaw enables an unauthenticated attacker to read arbitrary files on the system, potentially exposing sensitive information. The vulnerability affects Adobe Connect versions up to and including 12.11 and 4.4. The CVSS v3.1 score is 8.6 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N), indicating network attack vector, low attack complexity, no privileges or user interaction required, changed scope, and high confidentiality impact without integrity or availability impact.

An attacker can remotely read sensitive files on the affected Adobe Connect system without authentication or user interaction, potentially leading to information disclosure. The changed scope suggests the vulnerability may allow access beyond the originally intended security boundaries, increasing the risk of exposure of critical data.

No patch or official fix information is provided in the vendor advisory or input data. Patch status is not yet confirmed — check the Adobe vendor advisory for current remediation guidance. Until a fix is available, restrict network access to Adobe Connect instances and monitor for suspicious activity related to file access attempts.