CVE-2026-48391 describes an Untrusted Search Path vulnerability in Adobe Bridge. This vulnerability allows an attacker with low privileges to execute arbitrary code in the context of the current user if the victim opens a malicious file. The vulnerability changes the security scope and has a CVSS 3.1 base score of 8.2, indicating high impact on confidentiality, integrity, and availability. No patch or official remediation information is currently available, and no known exploits are reported in the wild.

Successful exploitation can lead to arbitrary code execution with the privileges of the current user, potentially compromising confidentiality, integrity, and availability of the affected system. Because user interaction is required, the attack vector is limited to scenarios where a user opens a crafted malicious file.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when opening files from untrusted sources. No official remediation or temporary fix has been published by Adobe at this time.