CVE-2026-48348 is an Incorrect Authorization vulnerability in Adobe Animate 2023 that could lead to arbitrary code execution in the context of the current user. The attack requires the victim to open a malicious file, and exploitation depends on factors beyond the attacker's control. The vulnerability changes the security scope and has a CVSS 3.1 base score of 7.7, indicating high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently provided, and no known exploits are reported in the wild.

Successful exploitation can result in arbitrary code execution with the privileges of the current user, potentially compromising confidentiality, integrity, and availability of the affected system. The attack requires user interaction and conditions beyond attacker control, limiting exploitation scenarios.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when opening files from untrusted sources to prevent exploitation.