CVE-2026-48391
Awaiting Analysis Awaiting Analysis - Queue

Untrusted Search Path Vulnerability in Bridge

Publication date: 2026-07-28

Last updated on: 2026-07-28

Assigner: Adobe Systems Incorporated

Description
Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-28
Last Modified
2026-07-28
Generated
2026-07-29
AI Q&A
2026-07-28
EPSS Evaluated
N/A
NVD
CVE-2026-48391
EUVD
EUVD-2026-49950

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
adobe bridge *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-426 The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an Untrusted Search Path issue in Adobe Bridge that allows arbitrary code execution with the privileges of the current user. An attacker with low privileges could exploit it by tricking a victim into opening a malicious file. The scope of the vulnerability is changed, meaning it may affect components beyond the immediate application.

Detection Guidance

Detection of this vulnerability requires monitoring for suspicious file execution or unusual activity in Adobe Bridge. Check for unexpected processes launched by Bridge or files opened from untrusted locations. Review system logs for Bridge-related events with elevated privileges.

Impact Analysis

If exploited, this vulnerability could allow an attacker to run malicious code on your system, potentially leading to data theft, system damage, or unauthorized access. Since exploitation requires user interaction, you are at risk if you open untrusted files.

Compliance Impact

This vulnerability could lead to arbitrary code execution with user interaction, potentially compromising sensitive data. This may impact compliance with GDPR (data protection) and HIPAA (health information security) by increasing risks of unauthorized access or data breaches.

Mitigation Strategies

Update Adobe Bridge to the latest version to patch the Untrusted Search Path vulnerability. Avoid opening files from untrusted sources and restrict user permissions to minimize exploitation risks.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-48391. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart