{"id":"CVE-2026-121349","published":"2026-11-10T22:18:24.643","lastModified":"2026-11-11T05:19:29.477","description":"Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to gain elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.","cvssScore":9.6,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","cwes":["CWE-22"],"vendors":[],"products":[],"references":[{"url":"https://www.adobe.com/trust/security/products/connect/apsb26-191.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"Adobe Connect contains a path traversal vulnerability (CWE-22) that allows a low-privileged attacker to escape directory restrictions by manipulating file paths, potentially leading to unauthorized access or arbitrary code execution in the current user's context. The vulnerability is exploitable over the network without user interaction and involves a scope change, indicating broader impact than initially intended.","exploitability":"Exploitation requires only low-privileged network access and no user interaction, making it highly exploitable by authenticated attackers.","blast_radius":"Successful exploitation could allow an attacker to read or write arbitrary files on the server, escalate privileges, or execute code in the context of the vulnerable service, potentially compromising the entire application environment.","remediation":"Upgrade to Adobe Connect version 2.590 or later, which contains the official fix for this vulnerability.","detection":"Defenders should monitor for anomalous file access patterns in web server logs (e.g., requests containing sequences like ../ or %2e%2e/ targeting non-public directories), especially from low-privileged users; look for unexpected file creation or modification events in application logs tied to user-initiated actions.","tags":["path-traversal","privilege-escalation","webapp","auth-bypass"],"model":"garnet-coder","analyzedAt":"2026-11-11T09:55:57.831Z"}}