CVE-2026-48346 describes an Untrusted Search Path vulnerability in Adobe Animate 2023. This vulnerability allows an attacker to execute arbitrary code in the context of the current user if the user opens a crafted malicious file. The vulnerability changes the security scope and requires user interaction to exploit. The CVSS 3.1 base score is 7.9, reflecting high severity with local attack vector, low attack complexity, low privileges required, and user interaction needed. The vulnerability impacts confidentiality and integrity but does not affect availability. No vendor advisory or patch information is currently available.

Successful exploitation could lead to arbitrary code execution with the current user's privileges, potentially compromising confidentiality and integrity of the affected system. Availability is not impacted. Exploitation requires the victim to open a malicious file, indicating social engineering is necessary.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when opening files from untrusted sources and follow best practices for handling suspicious files.