Recommended action window: Monitor and triage in normal cycle
NVD description
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🚨 HIGH SEVERITY: CVE-2026-103297 (CVSS 7.5) CAI Content Credentials cryptographic signature verification flaw enables security bypass & unauthorized write access. No user interaction required. Patch immediately. #CVE #Vulnerability #PatchNow #ThreatIntel #DFIR https://t.co/0teigrMlKx
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | adobe | c2pa | - | rust | - |
| App | adobe | c2pa-web | - | node.js | - |
| App | adobe | c2patool | - | - | - |