CVE-2026-48378: CAI Content Credentials | Improper Input Validation (CWE-20)
Published Oct 13, 2026
·Updated
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user interaction.
Affected Software
1 affected component
CAI Content Credentials
Event History
Oct 13, 2026
CVE Published
via MITRE·09:27 PM
Data Sourced
via MITRE·09:27 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Can this be exploited without credentials or user interaction?
Yes. The CVSS vector indicates no privileges are required and no user interaction is needed.
2
Does an attacker need local access to attempt exploitation?
No. The CVSS attack vector is network-based, indicating the issue can be targeted over the network.
3
What access could exploitation provide?
Successful exploitation could bypass security measures and provide unauthorized limited write access. The reported impact is limited to integrity; no confidentiality or availability impact is specified.