{"id":"CVE-2026-110090","kind":"vulnerability","aliases":["CVE-2026-110090"],"related":[],"title":"Premiere Pro: path traversal lets an attacker read arbitrary files","description":"Premiere Pro is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction. Scope is changed.","summary":"Adobe Premiere Pro has a path traversal flaw that lets an attacker read files and directories outside the intended folder. The sources say no user interaction is needed and the scope is changed; CVSS rates it 7.1 (high).","severity":"high","cvss":7.1,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Adobe Premiere","fixed":["26.5.3","27.0"],"affected":"<= 26.5.2; <= 25.6.6","ecosystem":"vendor"}],"ecosystems":[],"tags":["adobe","local","macos","premiere-pro","vendor","windows"],"not_affected_if":["patched-26.5.3-or-27.0","unknown"],"how_to_check":"In Premiere, Help > About Premiere Pro (or Creative Cloud app). Exposed if version is 26.5.2 or earlier, or 25.6.6 or earlier (Windows and macOS). Not exposed on 26.5.3 or 27.0 and later.","fix":"Update Adobe Premiere to 26.5.3 (26.x line) or 27.0 via Creative Cloud / Download Center. Premiere 25.6.x has no 25.x fix listed; move to 26.5.3 or 27.0.","status":"open","published_at":"2026-11-10T21:18:20+00:00","first_seen_at":"2026-11-10T21:46:09+00:00","triaged_at":"2026-11-10T21:48:29+00:00","updated_at":"2026-11-10T22:02:25+00:00","category":"vendor","confidence":0.85,"triage":{"at":"2026-11-10T21:48:29Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"Premiere Pro: path traversal lets an attacker read arbitrary files","impact":"medium","summary":"Adobe Premiere Pro has a path traversal flaw that lets an attacker read files and directories outside the intended folder. The sources say no user interaction is needed and the scope is changed; CVSS rates it 7.1 (high).","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["premiere-pro","adobe","windows","macos"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"attacker reads sensitive files outside the intended directory scope","analyst_note":"Find the affected Premiere Pro versions and the Adobe security bulletin with the fixed release, and confirm whether the attack needs a crafted project file or a network path.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Teams that run Adobe Premiere Pro on workstations or shared machines are exposed. The sources do not say which Premiere Pro versions are affected or which platforms, so the affected range is unknown.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000684,"input_tokens":4578,"output_tokens":452,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find the affected Premiere Pro versions and the Adobe security bulletin with the fixed release, and confirm whether the attack needs a crafted project file or a network path.","search":"'-110090':13A,16A '-2026':12A,15A '7.1':63B 'access':98C,106C 'adob':19B,27B 'adobe':17A 'affect':68C 'arbitrari':9A,87C 'attack':7A,38B,92C 'chang':59B,119C 'could':84C,93C 'cve':11A,14A 'cvss':60B 'directori':42B,79C,102C 'exploit':94C,108C 'file':10A,40B,88C,100C 'flaw':34B 'folder':46B 'high':64B 'improp':71C 'intend':45B,105C 'interact':52B,116C 'issu':111C 'lead':85C 'let':5A,36B 'limit':72C 'local':20B 'maco':21B 'need':54B 'outsid':43B,103C 'path':3A,32B,80C 'pathnam':75C 'premier':1A,23B,28B,65C 'premiere':18A 'premiere-pro':22B 'pro':2A,24B,29B,66C 'rate':61B 'read':8A,39B,90C 'requir':114C 'restrict':78C 'say':49B 'scope':57B,107C,117C 'sensit':99C 'sourc':48B 'system':89C 'travers':4A,33B,81C 'user':51B,115C 'vendor':25B 'vulner':82C,96C 'window':26B","nicknames":[],"mitigations":[],"who_affected":"Anyone running Adobe Premiere on Windows or macOS at 26.5.2 or earlier (or 25.6.6 or earlier) can have files outside the intended folder read through a path traversal. Adobe rates the attack vector as local with no user interaction, and the bulletin does not say how it is triggered. Teams on 26.5.3 or 27.0 can skip it.","tier":"B","verified":{"fix":{"at":"2026-11-10T22:02:25Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/premiere/apsb26-101.html","run_id":2907},"products":{"at":"2026-11-10T22:02:25Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/premiere/apsb26-101.html","run_id":2907},"how_to_check":{"at":"2026-11-10T22:02:25Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/premiere/apsb26-101.html","run_id":2907},"who_affected":{"at":"2026-11-10T22:02:25Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/premiere/apsb26-101.html","run_id":2907}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["adobepremiere","premiere"],"ptokens":["adobe","premiere"],"labels":["adobe","high","local","macos","premierepro","vendor","windows"],"campaign_type":null,"search_a":"'-110090':13A,16A '-2026':12A,15A 'adobe':17A 'arbitrari':9A 'attack':7A 'cve':11A,14A 'file':10A 'let':5A 'path':3A 'premier':1A 'premiere':18A 'pro':2A 'read':8A 'travers':4A","search_b":"'7.1':63B 'adob':19B,27B 'attack':38B 'chang':59B 'cvss':60B 'directori':42B 'file':40B 'flaw':34B 'folder':46B 'high':64B 'intend':45B 'interact':52B 'let':36B 'local':20B 'maco':21B 'need':54B 'outsid':43B 'path':32B 'premier':23B,28B 'premiere-pro':22B 'pro':24B,29B 'rate':61B 'read':39B 'say':49B 'scope':57B 'sourc':48B 'travers':33B 'user':51B 'vendor':25B 'window':26B","search_c":"'access':98C,106C 'affect':68C 'arbitrari':87C 'attack':92C 'chang':119C 'could':84C,93C 'directori':79C,102C 'exploit':94C,108C 'file':88C,100C 'improp':71C 'intend':105C 'interact':116C 'issu':111C 'lead':85C 'limit':72C 'outsid':103C 'path':80C 'pathnam':75C 'premier':65C 'pro':66C 'read':90C 'requir':114C 'restrict':78C 'scope':107C,117C 'sensit':99C 'system':89C 'travers':81C 'user':115C 'vulner':82C,96C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T21:18:20+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss_by":"psirt@adobe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-110090","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110090","severity":null,"published_at":"2026-11-10T21:18:20+00:00","modified_at":"2026-11-10T21:18:20+00:00","first_seen_at":"2026-11-10T21:46:09+00:00","fetched_at":"2026-11-10T21:46:09+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-110090:2907","url":"https://www.adobe.com/trust/security/products/premiere/apsb26-101.html","severity":null,"published_at":"2026-11-10T22:02:25+00:00","modified_at":"2026-11-10T22:02:25+00:00","first_seen_at":"2026-11-10T22:02:25+00:00","fetched_at":"2026-11-10T22:02:25+00:00","note":"Adobe APSB26-101 (Nov 10 2026) read: affected Premiere <=26.5.2 and <=25.6.6; fixed 26.5.3 and 27.0; CVSS vector AV:L, no exploit known to Adobe. Bulletin does not say how the file read is triggered (project file or otherwise).","cites":["https://www.adobe.com/trust/security/products/premiere/apsb26-101.html"]}],"documents":[{"id":119283,"url":"https://www.adobe.com/trust/security/products/premiere/apsb26-101.html","title":"Adobe Premiere APSB26-101","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}