CVE-2026-100120: CAI Content Credentials | Improper Input Validation (CWE-20)
Published Oct 13, 2026
·Updated
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
Affected Software
1 affected component
CAI Content Credentials
Event History
Oct 13, 2026
CVE Published
via MITRE·09:27 PM
Data Sourced
via MITRE·09:27 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Can this be exploited remotely without authentication?
Yes. The CVSS vector indicates network-based exploitation with no privileges required and low attack complexity; no user interaction is required.
2
What is the expected security impact after exploitation?
The reported impact is high to integrity, consistent with unauthorized write access. The CVSS vector reports no confidentiality or availability impact, and scope is unchanged.