Medium severity4.0NVD Advisory· Published Aug 11, 2026· Updated Aug 28, 2026
CVE-2026-71390
CVE-2026-71390
Description
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user interaction.
Affected products
5cpe:2.3:a:adobe:c2pa:*:*:*:*:*:rust:*:*+ 1 more
- cpe:2.3:a:adobe:c2pa:*:*:*:*:*:rust:*:*range: <0.90.6
- cpe:2.3:a:adobe:c2pa-web:*:*:*:*:*:node.js:*:*range: <0.12.1
Patches
Vulnerability mechanics
References
1News mentions
3- Adobe: 25 Vulnerabilities Across Multiple Products Disclosed in Single BatchVypr Intelligence · Aug 11, 2026
- Adobe C2pa Web: 15 Vulnerabilities in CAI Content Credentials Disclosed TogetherVypr Intelligence · Aug 11, 2026
- Adobe C2pa Web: Batch of 15 Vulnerabilities in CAI Content Credentials DisclosedVypr Intelligence · Aug 11, 2026