CVE-2026-48447

Analyzed Analyzed - Analysis Complete

Incorrect Authorization in Adobe Lightroom Classic Leading to Arbitrary Code Execution

Publication date: 2026-08-11

Last updated on: 2026-08-28

Assigner: Adobe Systems Incorporated

Description

Lightroom Classic is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-08-28

Generated

2026-09-01

AI Q&A

2026-08-12

EPSS Evaluated

2026-08-30

NVD

CVE-2026-48447

EUVD

EUVD-2026-56834

Affected Vendors & Products

Vendor	Product	Version / Range
adobe	lightroom	to 15.5 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-863	The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

Executive Summary

This vulnerability in Adobe Lightroom Classic is an Incorrect Authorization issue that allows arbitrary code execution. It requires user interaction, meaning a victim must open a malicious file to trigger the exploit. The scope is changed, indicating it affects components beyond the vulnerable one.

Detection Guidance

Detection involves checking for suspicious files or unusual activity when opening files in Lightroom Classic. Monitor for unauthorized code execution or privilege escalation attempts. No specific commands are provided in the context.

Impact Analysis

If exploited, this vulnerability could allow an attacker to run arbitrary code on your system with the same privileges as the current user. This could lead to unauthorized access, data theft, or system compromise. Since exploitation requires opening a malicious file, users should avoid untrusted files.

Compliance Impact

This vulnerability could potentially lead to unauthorized code execution, which may result in unauthorized access to sensitive data. This could impact compliance with GDPR by risking data breaches and HIPAA by compromising protected health information if exploited.

Mitigation Strategies

Update Lightroom Classic to the latest version. Avoid opening untrusted files. Restrict user permissions to minimize impact. Monitor for unusual activity.

Hi! I’m here to help you understand CVE-2026-48447. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70