The Adobe Content Credentials Rust SDK contains an improper limitation of a pathname to a restricted directory (CWE-22) vulnerability. This flaw enables an attacker to perform path traversal attacks to read arbitrary files or directories beyond the intended scope. Exploitation does not require user interaction and the vulnerability changes the security scope. The CVSS v3.1 base score is 7.1, reflecting high impact on integrity but no impact on confidentiality or availability. No patch or remediation details have been provided by the vendor yet.

An attacker can gain unauthorized read access to arbitrary files or directories outside the intended restricted directory, potentially exposing sensitive information. The vulnerability affects integrity but does not impact confidentiality or availability. Exploitation does not require user interaction and the scope of the vulnerability is changed, indicating it may affect components beyond the initially intended boundary.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been provided by Adobe at this time.