CVE-2026-103847: Dimension | Untrusted Search Path (CWE-426)
Dimension is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. A local attacker with user permissions could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must run the application. Scope is changed.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to exploitation?
Users running Adobe Dimension on a system where a local attacker already has user-level access are exposed. Exploitation occurs in the context of the user who runs the application.
What does an attacker need to exploit this issue?
The attacker needs local user permissions and must induce the victim to run the application. No attacker privileges are required beyond local user access, but user interaction is required.
What is the potential impact if exploitation succeeds?
Successful exploitation can result in arbitrary code execution with the current user's privileges. The reported impact includes high confidentiality, integrity, and availability effects, with scope changed.