CVE-2026-79904

Analyzed Analyzed - Analysis Complete

Path Traversal in Photoshop Mobile

Publication date: 2026-09-08

Last updated on: 2026-09-09

Assigner: Adobe Systems Incorporated

Description

Photoshop Mobile is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to access unauthorized files or directories outside the intended restrictions. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-08

Last Modified

2026-09-09

Generated

2026-09-29

AI Q&A

2026-09-10

EPSS Evaluated

2026-09-27

NVD

CVE-2026-79904

Affected Vendors & Products

Vendor	Product	Version / Range
adobe	photoshop_mobile	to 1.7.0.2302 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-22	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

Executive Summary

Photoshop Mobile has a Path Traversal vulnerability where a low-privileged attacker could access files or directories outside intended restrictions. This bypasses security features and requires user interaction to open a malicious file.

Detection Guidance

Detection involves monitoring for unauthorized file access attempts or suspicious file operations. Check Photoshop Mobile logs for path traversal patterns or unexpected file reads. Review system logs for files accessed outside normal directories. No specific commands are provided in the context.

Impact Analysis

An attacker could access sensitive files on your device if you open a malicious file. This may lead to unauthorized data exposure or system compromise, depending on file permissions.

Compliance Impact

This vulnerability could lead to unauthorized data access, potentially violating GDPR (data protection) or HIPAA (health data privacy) if sensitive files are exposed. Compliance risks depend on the data involved.

Mitigation Strategies

Update Photoshop Mobile to the latest version. Avoid opening files from untrusted sources. Restrict user permissions to minimize access to sensitive directories. Monitor for unusual file access patterns.

Hi! I’m here to help you understand CVE-2026-79904. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70