CVE-2026-48404 is an out-of-bounds write vulnerability in Adobe Lightroom Classic that may allow an attacker to execute arbitrary code in the context of the current user. Successful exploitation requires the victim to open a crafted malicious file. The vulnerability is classified under CWE-787 and has a CVSS v3.1 base score of 7.8, indicating high severity with attack vector local, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability. No official patch or remediation level has been provided at this time, and no affected versions have been specified.

If exploited, this vulnerability could allow an attacker to execute arbitrary code with the privileges of the current user, potentially leading to full compromise of the affected system's confidentiality, integrity, and availability. However, exploitation requires user interaction by opening a malicious file, limiting the attack vector to scenarios involving user involvement.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when opening files from untrusted sources. Monitor Adobe's official security advisories for updates and patches addressing this vulnerability.