Adobe Content Credentials Rust SDK contains a Server-Side Request Forgery (SSRF) vulnerability (CWE-918) identified as CVE-2026-47922. This vulnerability allows an attacker to induce the server to make unintended requests, potentially escalating privileges. Exploitation requires user interaction, specifically the victim visiting a maliciously crafted URL or interacting with a compromised web page. The vulnerability impacts the security scope of the application. No patch or official remediation has been published yet.

Successful exploitation of this SSRF vulnerability could result in privilege escalation within the affected system. However, it requires user interaction, limiting the ease of exploitation. There is no indication of confidentiality or availability impact, only integrity impact is noted. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution with untrusted URLs and avoid interacting with suspicious web content that could trigger the vulnerability.