CVE-2026-79904
MediumCVSS 5.0Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
Photoshop Mobile is affected by a Path Traversal vulnerability that could result in a security feature bypass. A low-privileged attacker could access unauthorized files or directories outside intended restrictions. Exploitation depends on conditions beyond the attacker's control and requires user interaction (opening a malicious file).
Risk Assessment
An attacker could bypass security and access sensitive files on the system, potentially leading to data confidentiality breach.
Recommendation
Update Photoshop Mobile to the latest version and instruct users not to open files from untrusted sources.
Other vulnerabilities in Photoshop Mobile
Original NVD description (English source)
Photoshop Mobile is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to access unauthorized files or directories outside the intended restrictions. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS