CVE-2026-71360: Uncontrolled Resource Consumption (CWE-400) in Adobe C2PA Tool

The vulnerability identified as CVE-2026-71360 affects Adobe's C2PA Tool, specifically the CAI Content Credentials component. It is classified as CWE-400, indicating uncontrolled resource consumption. An attacker can exploit this flaw remotely with no privileges and no user interaction to cause a denial-of-service by exhausting system resources. The CVSS v3.1 base score is 7.5, reflecting high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to availability (no confidentiality or integrity impact). No known exploits are reported in the wild, and no patch or remediation guidance has been published by Adobe as of the data provided.

Successful exploitation results in denial-of-service of the Adobe C2PA Tool application by exhausting system resources. There is no impact on confidentiality or integrity. The vulnerability can be triggered remotely without authentication or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, monitor for updates from Adobe and consider limiting exposure of the affected application to untrusted networks.