CVE-2026-104345(adobe / c2pa)

LOWCVSS 7.5 · HIGH

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-20

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • c2pa
  • c2pa-web
  • c2patool

Affected systems

Vendors
Products
c2pac2pa-webc2patool

Deep dive

Full discourse1 post
  • DFIR Lab@DFIR_Lab

    🚨 HIGH severity CVE-2026-104345 (CVSS 7.5) CAI Content Credentials: Improper input validation allows security bypass & unauthorized write access. No user interaction required. Patch immediately. #CVE #Vulnerability #PatchNow https://t.co/zglHdyhyVk

    0000022
    150 followersView on X
CPE platform detail3 entries

3 of 3 entries

PartVendorProductVersionTarget SWTarget HW
Appadobec2pa-rust-
Appadobec2pa-web-node.js-
Appadobec2patool---

Explore more