CVE-2026-48441: Lightroom Classic | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Lightroom Classic is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-48441?
CVE-2026-48441 has a severity rating of 8.6, categorized as high.
How do I fix CVE-2026-48441?
To fix CVE-2026-48441, update Adobe Lightroom Classic to the latest version as released by Adobe.
What types of attacks can be executed using CVE-2026-48441?
CVE-2026-48441 can be exploited to perform arbitrary file system reads, allowing access to sensitive files and directories.
Which software is impacted by CVE-2026-48441?
CVE-2026-48441 affects Adobe Lightroom Classic.
What is Path Traversal as it relates to CVE-2026-48441?
Path Traversal in CVE-2026-48441 refers to the improper limitation of access to resources that allows attackers to traverse directories to access restricted files.