CVE-2026-48347 is an OS Command Injection vulnerability in Adobe Animate 2023 caused by improper neutralization of special elements used in OS commands. This flaw could enable an attacker to execute arbitrary code within the context of the current user if the victim opens a crafted malicious file. The vulnerability changes the security scope and requires user interaction for exploitation. No patch or official remediation has been disclosed at this time.

Successful exploitation could lead to arbitrary code execution with the privileges of the current user, potentially compromising confidentiality, integrity, and availability of the affected system. The attack requires user interaction, limiting the attack vector to scenarios where a user opens a malicious file.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when opening files from untrusted sources. No official fix or temporary workaround has been provided by the vendor as of the current information.