CVE Catalog

CVE-2026-48353

MediumCVSS 5.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.26%

18th percentile - higher than 18% of all known CVEs

Summary

An Improper Input Validation vulnerability in CAI Content Credentials could lead to arbitrary file system read. An attacker can exploit this to access sensitive files and directories outside the intended scope. Exploitation requires user interaction, as a victim must open a malicious file.

Risk Assessment

The organization risks exposure of confidential data, such as configuration files, credentials, or other sensitive information stored on the file system.

Recommendation

Update CAI Content Credentials to the latest patched version immediately. Until then, avoid opening files from untrusted sources.

Other vulnerabilities in CAI Content Credentials

See all
Original NVD description (English source)

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS