ADOBE PREMIERE · CVE-2026-110090 · Vendor
FIX → 27.0 · 26.5.3 ✓ verified
Adobe Premiere Pro has a path traversal flaw that lets an attacker read files and directories outside the intended folder. The sources say no user interaction is needed and the scope is changed; CVSS rates it 7.1 (high).
first public Nov 10, 2026 · 2 sources
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Anyone running Adobe Premiere on Windows or macOS at 26.5.2 or earlier (or 25.6.6 or earlier) can have files outside the intended folder read through a path traversal. Adobe rates the attack vector as local with no user interaction, and the bulletin does not say how it is triggered. Teams on 26.5.3 or 27.0 can skip it.
Not affected if patched-26.5.3-or-27.0, unknown
Who cares adobe, local, macos, premiere-pro, windows
26.5.2 or earlier, or 25.6.6 or earlier (Windows and macOS)26.5.3 or 27.0 and laterPremiere Pro is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction. Scope is changed.
This page as .md · .json · CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
Upgrade to 27.0 · 26.5.3
26.5.3 (26.x line) or 27.0 via Creative Cloud / Download Center26.5.3 or 27.0