CVE-2026-103845

Received Received - Intake

Uncontrolled Search Path Element in Dimension Allows Arbitrary Code Execution

Publication date: 2026-10-13

Last updated on: 2026-10-14

Assigner: Adobe Systems Incorporated

Description

Dimension is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A local attacker with user permissions could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must run the application. Scope is changed.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-13

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-14

EPSS Evaluated

2026-10-18

NVD

CVE-2026-103845

EUVD

EUVD-2026-100573

Affected Vendors & Products

Vendor	Product	Version / Range
Adobe	Adobe	Dimension 0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-427	The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

Attack-Flow Graph

Executive Summary

This vulnerability is an Uncontrolled Search Path Element issue in Adobe Dimension. It allows a local attacker with user permissions to execute arbitrary code on a victim's system if they run the application. The scope is changed, meaning it could affect components beyond the immediate user context.

Detection Guidance

Detection of CVE-2026-103845 requires checking for vulnerable Adobe Dimension installations. Inspect installed software versions using system commands like 'wmic product get name,version' on Windows or 'dpkg -l | grep Adobe' on Linux. Verify if the installed version matches affected releases.

Impact Analysis

If you run Adobe Dimension, an attacker could exploit this to run malicious code on your computer. This could lead to data theft, system damage, or further network compromise. The attacker needs local access and you must execute the application for exploitation.

Compliance Impact

This vulnerability could lead to arbitrary code execution, potentially compromising user data confidentiality and integrity. Such breaches may violate GDPR's data protection requirements and HIPAA's safeguards for protected health information if exploited.

Mitigation Strategies

Update Adobe Dimension to the latest version to address the Uncontrolled Search Path Element vulnerability. Ensure all users avoid running untrusted applications and restrict local attacker access through system permissions.

Hi! I’m here to help you understand CVE-2026-103845. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70