CVE-2026-48348: Animate | Incorrect Authorization (CWE-863)
Animate is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-48348?
CVE-2026-48348 has a severity score of 7.7, categorizing it as high risk.
What type of vulnerability is CVE-2026-48348?
CVE-2026-48348 is an Incorrect Authorization vulnerability, classified under CWE-863.
What can happen if CVE-2026-48348 is exploited?
Exploiting CVE-2026-48348 can result in arbitrary code execution in the context of the current user.
Is user interaction required to exploit CVE-2026-48348?
Yes, the exploitation of CVE-2026-48348 requires user interaction, such as opening a malicious file.
How can CVE-2026-48348 be mitigated?
To mitigate CVE-2026-48348, users should avoid opening untrusted files in Animate and ensure software updates are applied.