CVE-2026-48348 is an Incorrect Authorization vulnerability in Adobe Animate 2023 that could lead to arbitrary code execution in the context of the current user. The attack requires user interaction, specifically opening a malicious file, and the scope of the vulnerability is changed, indicating a potential impact beyond the vulnerable component. The CVSS 3.1 base score is 7.7 (high), with attack vector local, high attack complexity, no privileges required, user interaction required, and complete impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and no known exploits in the wild have been reported.

Successful exploitation could allow an attacker to execute arbitrary code with the current user's privileges, potentially compromising confidentiality, integrity, and availability of the affected system. The requirement for user interaction and high attack complexity reduces the likelihood of exploitation but does not eliminate the risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when opening files from untrusted sources and follow best practices for handling potentially malicious content.