CVE-2026-81997 is an Incorrect Authorization vulnerability in Adobe Acrobat that permits an attacker to bypass security controls, resulting in unauthorized write access. The attack vector requires local access with user interaction (opening a malicious file). The vulnerability impacts the integrity of the system by allowing unauthorized modifications. The CVSS v3.1 base score is 6.3 (medium severity), with attack vector local, low attack complexity, no privileges required, user interaction required, changed scope, no confidentiality or availability impact, and high integrity impact. There is no vendor advisory or patch information available at this time.

Successful exploitation allows an attacker to bypass security features and gain unauthorized write access, potentially modifying files or settings without proper authorization. Confidentiality and availability are not impacted. The attack requires user interaction and local access, limiting the attack surface.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when opening files from untrusted sources to avoid triggering this vulnerability.