CVE-2026-48347 is an OS Command Injection vulnerability in Adobe Animate 2023 caused by improper neutralization of special elements used in OS commands. This flaw could enable an attacker to execute arbitrary code in the context of the current user if the victim opens a crafted malicious file. The vulnerability changes the security scope and requires user interaction for exploitation. No patch or official remediation has been confirmed at this time.

Successful exploitation can lead to arbitrary code execution with the privileges of the current user, potentially compromising confidentiality, integrity, and availability of the affected system. The attack requires user interaction, limiting remote exploitation without user involvement.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should avoid opening files from untrusted sources in Adobe Animate 2023 to reduce the risk of exploitation.