---
id: "CVE-2026-104349"
kind: "vulnerability"
aliases: ["CVE-2026-104349"]
title: "Adobe Creative Cloud Desktop: search path flaw runs code as the user"
severity: "high"
cvss: 7.3
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["creative-cloud-desktop", "macos", "other", "windows"]
not_affected_if: ["not-installed"]
published_at: "2026-10-27T17:16:55+00:00"
first_seen_at: "2026-10-27T17:32:44+00:00"
updated_at: "2026-10-27T17:40:19+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-104349", "first_seen_at": "2026-10-27T17:32:44+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-10-27T17:40:19+00:00"}]
---

# Adobe Creative Cloud Desktop: search path flaw runs code as the user

Creative Cloud Desktop loads a library or component from an uncontrolled search path. A low-privileged attacker who gets a victim to open a malicious file can run arbitrary code in the victim's user context.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

Unknown until Adobe's bulletin lists affected versions. Check the installed Creative Cloud Desktop version (Creative Cloud app > Help > About, or Windows Apps list / macOS Applications) and compare with the new Adobe bulletin once published.

## Fix

Unknown: no Adobe bulletin with a fixed version found yet. Meanwhile update Creative Cloud Desktop via its built-in updater and avoid opening untrusted files.

## Timeline

- 2026-10-27T17:32:44+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-104349
- 2026-10-27T17:40:19+00:00 analyst — Adobe bulletin for this CVE not yet found (published today; Adobe's index/Creative Cloud product page list only APSB26-77 from July, which covers different CVEs 48272/48344, Windows, no user interaction; not applied here). Versions/fix unknown; recheck the Adobe Creative Cloud security page (helpx.adobe.com/security/products/creative-cloud.html) for a new APSB. NVD CVSS 7.3 AV:L/UI:R by Adobe PSIRT; no exploitation or PoC found.

## From the sources

Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_