CVSS 5.9 (medium) · published 2026-10-13
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction.
Affected products (NVD): adobe c2pa, adobe c2pa-web, adobe c2patool
Fixed in (NVD): 0.91.1, 0.15.3, 0.28.1
Weakness: CWE-295
Source: NVD CVE-2026-100116
Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.