CVE-2026-34664: Substance3D - Designer | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Substance3D - Designer versions 15.1.0 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-34664?
CVE-2026-34664 is classified as a high-severity vulnerability due to its potential for path traversal attacks.
How do I fix CVE-2026-34664?
To fix CVE-2026-34664, upgrade Adobe Substance 3D Designer to version 15.1.1 or later.
What systems are affected by CVE-2026-34664?
CVE-2026-34664 affects Adobe Substance 3D Designer versions 15.1.0 and earlier.
What is the impact of CVE-2026-34664?
The impact of CVE-2026-34664 could allow unauthorized access to restricted files and directories on the system.
How can CVE-2026-34664 be exploited?
CVE-2026-34664 can be exploited through crafted input that manipulates file paths, leading to exposure of sensitive information.