Adobe Content Credentials Rust SDK suffers from an improper input validation vulnerability (CWE-20) that enables an attacker to perform arbitrary file system reads. This occurs because the SDK does not properly validate input, allowing access to files and directories beyond the intended scope. Exploitation requires the victim to open a crafted malicious file, which triggers the vulnerability. There is no vendor advisory or patch information currently available, and no known exploits in the wild have been reported.

Successful exploitation allows an attacker to read sensitive files and directories outside the intended access scope, potentially exposing confidential information. The vulnerability does not impact integrity or availability, only confidentiality. User interaction is required, limiting the attack vector to scenarios where a victim opens a malicious file.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when opening files from untrusted sources to prevent exploitation. Monitor Adobe's official channels for updates or patches addressing this vulnerability.