CVE-2026-121351

Summary

Adobe Connect contains a path traversal vulnerability (CWE-22) allowing unauthenticated remote attackers to read arbitrary files on the server by manipulating directory traversal sequences in a pathname. The vulnerability affects the application's file access logic and has full confidentiality impact due to scope change.

Exploitability

Exploitation requires no user interaction or prior authentication and is straightforward for remote attackers given knowledge of vulnerable endpoints or common file paths.

Blast radius

Successful exploitation enables full compromise of server-side sensitive data, including configuration files, credentials, and internal application resources, potentially enabling further lateral movement or privilege escalation.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Adobe Connect version 2.590 or later, as this is the minimum version that addresses CVE-2026-121351.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.