CVE-2026-48275 describes an Untrusted Search Path vulnerability in Adobe Illustrator Desktop 2026. This vulnerability allows an attacker to execute arbitrary code in the context of the current user if the user opens a malicious file crafted to exploit the improper handling of search paths. The vulnerability affects the security scope, potentially escalating impact on confidentiality, integrity, and availability. The CVSS 3.1 score is 8.6 (high), reflecting local attack vector with low complexity, no privileges required, user interaction needed, and complete impact on confidentiality, integrity, and availability. No patch or remediation level has been provided by the vendor as of the published date.

Successful exploitation can lead to arbitrary code execution with full control under the current user context, compromising confidentiality, integrity, and availability of the affected system. The attack requires user interaction, specifically opening a malicious file, which limits exploitation scenarios to social engineering or targeted attacks.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when opening files from untrusted sources. No official mitigation or temporary fix has been provided by Adobe at this time.