CVE-2026-76191 is an improper control of code generation vulnerability in Adobe Animate 2023. This code injection flaw enables a low-privileged attacker to execute arbitrary code when a victim opens a crafted malicious file. The vulnerability affects the current user's context and has a high CVSS score of 8.2, indicating significant impact on confidentiality, integrity, and availability. The scope of the vulnerability is changed, meaning the attack can affect resources beyond the initially vulnerable component.

Successful exploitation can lead to arbitrary code execution with the privileges of the current user, potentially compromising system confidentiality, integrity, and availability. Because the attacker requires user interaction to open a malicious file, the attack vector is limited to social engineering or tricking the user into opening such a file.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should avoid opening untrusted or suspicious files in Adobe Animate 2023. Monitor Adobe's security advisories for updates on patches or mitigations.