{"id":"CVE-2026-34689","published":"2026-09-22T19:16:43.210","lastModified":"2026-09-25T17:08:40.990","description":"Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction. Scope is changed.","cvssScore":8.6,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","cwes":["CWE-22"],"vendors":["adobe","apple","microsoft"],"products":["connect","macos","windows","connect for mobile"],"references":[{"url":"https://helpx.adobe.com/security/products/connect/apsb26-150.html","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The flaw is an Improper Limitation of a Pathname to a Restricted Directory vulnerability in Adobe Connect, allowing attackers to access sensitive files outside the intended access scope. This matters because it can lead to unauthorized access to critical information without user interaction.","exploitability":"Exploitation is relatively straightforward as it does not require user interaction, but the attacker must have the ability to manipulate file paths.","blast_radius":"If exploited, this could result in unauthorized access to sensitive files on the affected systems, potentially leading to data breaches or other security incidents.","remediation":"Upgrade to Adobe Connect version 4.7.0 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["path-traversal","file-access","web"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-09-30T09:27:27.909Z"}}