CVE-2026-48377: Improper Input Validation (CWE-20) in Adobe Content Credentials Rust SDK

The Adobe Content Credentials Rust SDK is affected by an improper input validation vulnerability (CWE-20) that could be exploited to bypass security controls. This vulnerability allows an attacker to gain unauthorized limited write access to the system. Exploitation does not require any user interaction. The CVSS v3.1 base score is 5.3, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and no availability impact.

An attacker exploiting this vulnerability could bypass security features and obtain unauthorized limited write access to the affected system. There is no impact on confidentiality or availability, and exploitation does not require user interaction or privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround information is currently available.