CVE-2026-48378: Improper Input Validation (CWE-20) in Adobe Content Credentials Rust SDK

Adobe Content Credentials Rust SDK contains an improper input validation vulnerability (CWE-20) that could be exploited by an attacker to bypass security controls and obtain unauthorized limited write access. Exploitation does not require user interaction, increasing the risk of automated or remote attacks. The CVSS 3.1 base score is 5.3, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and no availability impact. No vendor advisory or patch information is available at this time.

An attacker exploiting this vulnerability could bypass security features and gain unauthorized limited write access to the affected system or data. There is no impact on confidentiality or availability, but integrity is partially affected. The vulnerability can be exploited remotely without user interaction or privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor vendor communications for updates. No specific mitigation instructions are available from the vendor at this time.