CVE-2026-102501: CAI Content Credentials | Improper Input Validation (CWE-20)
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user interaction.
Affected Software
Event History
Frequently Asked Questions
What level of access could an attacker gain?
Successful exploitation could allow an attacker to bypass security measures and obtain unauthorized limited write access. The available information does not indicate access to confidential data or service disruption.
Does exploitation require authentication or user interaction?
No. The vulnerability is rated as network-accessible with low attack complexity, requires no privileges, and does not require user interaction.
Which deployments should be prioritized for investigation?
Prioritize CAI Content Credentials deployments that are reachable over a network, because the vulnerability can be exploited remotely without prior authentication. The provided information does not identify affected versions or configuration-specific conditions.