CVE-2026-48397 is a deserialization of untrusted data vulnerability (CWE-502) in Adobe Lightroom Classic. This flaw allows an attacker to execute arbitrary code in the context of the current user if the victim opens a crafted malicious file. The vulnerability affects the security scope and requires user interaction for exploitation. The CVSS 3.1 base score is 8.6, reflecting high impact on confidentiality, integrity, and availability.

Successful exploitation could lead to arbitrary code execution with the privileges of the current user, potentially compromising confidentiality, integrity, and availability of the affected system. Since exploitation requires user interaction, the attack vector is limited to scenarios where a user opens a malicious file.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should avoid opening untrusted or suspicious files in Adobe Lightroom Classic.