CVE-2026-48353: Improper Input Validation (CWE-20) in Adobe Content Credentials Rust SDK

Adobe Content Credentials Rust SDK contains an improper input validation vulnerability (CWE-20) that may permit an attacker to read arbitrary files on the file system. This occurs because the SDK does not properly validate input, allowing access beyond intended boundaries. Exploitation requires user interaction, such as opening a crafted malicious file. There is no vendor-provided remediation or patch information available at this time, and no known exploits in the wild have been reported.

Successful exploitation can lead to unauthorized disclosure of sensitive files and directories outside the intended access scope. This impacts confidentiality but does not affect integrity or availability. The attack vector requires local user interaction, limiting the ease of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when opening files from untrusted sources to prevent exploitation.