CVE-2026-81994 is a prototype pollution vulnerability (CWE-1321) in Adobe Acrobat that permits an attacker to manipulate object prototype attributes improperly. This manipulation can result in arbitrary reading of the file system, potentially exposing sensitive files and directories outside the normal access scope. The attack requires user interaction, as the victim must open a crafted malicious file. The vulnerability has a CVSS v3.1 score of 8.2, indicating high severity, with attack vector local, low attack complexity, no privileges required, user interaction required, scope changed, and high impact on confidentiality and integrity but no impact on availability. There is no vendor advisory or patch information available at this time, and no known exploits in the wild have been reported.

Successful exploitation can lead to unauthorized reading of sensitive files and directories on the affected system, potentially compromising confidentiality and integrity of data. The scope of the vulnerability is changed, meaning the attack can affect resources beyond the initially intended security boundaries. No impact on system availability is indicated.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when opening files from untrusted sources to prevent exploitation. No official remediation or temporary fixes are currently documented.