CVE-2026-48272 is an Uncontrolled Search Path Element vulnerability in Adobe Creative Cloud Desktop. This flaw could allow an attacker to execute arbitrary code with the privileges of the current user by manipulating the search path used by the application. The vulnerability does not require user interaction for exploitation but depends on conditions outside the attacker's control. The CVSS v3.1 base score is 7.8, indicating high severity with local attack vector, high attack complexity, low privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. No specific affected versions or remediation details have been disclosed.

Successful exploitation may lead to arbitrary code execution with the privileges of the current user, potentially compromising confidentiality, integrity, and availability of the affected system. The attack complexity is high, and local access is required, which limits the attack surface. There is no indication of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should follow Adobe's security recommendations and monitor official advisories for updates.