Summary
A local attacker could bypass security controls and gain limited unauthorized write access without user interaction.
Disclosure timeline
- Public disclosure
Credits
Cantina · Agent-discovered and human-verified
Vulnerability disclosure
Improper input validation can permit limited unauthorized writes
CVE-2026-71390
- Affected product
- Adobe Content Credentials
- Severity
- Medium · CVSS 4.0
- Weakness
- CWE-20
- Disclosed