{"id":"CVE-2026-113560","kind":"vulnerability","aliases":["CVE-2026-113560"],"related":[],"title":"Adobe Audition: malicious file opens let attacker run code as user","description":"Audition is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.","summary":"Adobe Audition has an incorrect authorization flaw that can let an attacker run arbitrary code in the context of the current user. Exploitation requires the victim to open a malicious file.","severity":"high","cvss":7.7,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Adobe Audition","fixed":["26.5.3","27.0"],"affected":"<= 26.5, <= 25.6.6","ecosystem":"vendor"}],"ecosystems":[],"tags":["adobe-audition","desktop","macos","other","windows"],"not_affected_if":["audition-27.0-or-26.5.3","no-audition-installed"],"how_to_check":"Open Audition and check Help > About Adobe Audition. You are affected if the version is 26.5 or earlier, or 25.6.6 or earlier. Fixed builds are 26.5.3 and 27.0. In Creative Cloud desktop, check the Apps tab for updates.","fix":"Update Adobe Audition to 27.0, or to 26.5.3 if on the 26.x line (Windows and macOS), per Adobe APSB26-102. The 25.6.x line is listed as affected through 25.6.6, and the bulletin names no fixed 25.x build, so move to 26.5.3 or 27.0.","status":"open","published_at":"2026-11-10T21:18:49+00:00","first_seen_at":"2026-11-10T21:46:13+00:00","triaged_at":"2026-11-10T21:48:23+00:00","updated_at":"2026-11-10T21:55:39+00:00","category":"other","confidence":0.9,"triage":{"at":"2026-11-10T21:48:23Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Adobe Audition: malicious file opens let attacker run code as user","impact":"high","summary":"Adobe Audition has an incorrect authorization flaw that can let an attacker run arbitrary code in the context of the current user. Exploitation requires the victim to open a malicious file.","audience":"businesses","category":"other","nicknames":[],"who_cares":["adobe-audition","desktop"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"Arbitrary code runs as the logged-in user on the machine","analyst_note":"Confirm affected and fixed Audition versions from Adobe's security bulletin; the NVD entry gives no product ranges.","how_to_check":"- Check the installed Audition version under Help > About Adobe Audition in the application.\n- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-audition-installed"],"who_is_affected":"Teams that use Adobe Audition on workstations are exposed when a user opens an attacker-supplied file. The sources do not list affected or fixed versions, so the exact range is unknown.","user_interaction":"yes","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000676,"input_tokens":4572,"output_tokens":437,"severity_before":"high"},"analyst_status":"done","analyst_note":"Confirm affected and fixed Audition versions from Adobe's security bulletin; the NVD entry gives no product ranges.","search":"'-113560':14A,17A '-2026':13A,16A 'adob':1A,21B,27B 'adobe':18A 'adobe-audit':20B 'affect':60C 'arbitrari':40B,70C,88C 'attack':7A,38B,81C,96C 'audit':2A,22B,28B,58C 'audition':19A 'author':32B,64C 'beyond':94C 'chang':117C 'code':9A,41B,71C,89C 'condit':93C 'context':44B,75C 'control':98C 'could':67C,82C 'current':47B,78C 'cve':12A,15A 'depend':91C 'desktop':23B 'execut':72C,87C 'exploit':49B,83C,90C,99C 'file':4A,57B,114C 'flaw':33B 'incorrect':31B,63C 'interact':105C 'issu':102C 'let':6A,36B 'maco':24B 'malici':3A,56B,113C 'must':110C 'open':5A,54B,111C 'requir':50B,103C 'result':68C 'run':8A,39B 'scope':115C 'user':11A,48B,79C,104C 'victim':52B,109C 'vulner':65C,85C 'window':26B","nicknames":[],"mitigations":[],"who_affected":"Anyone running Adobe Audition on Windows or macOS, version 26.5 and earlier or 25.6.6 and earlier, is exposed when a user opens an attacker-supplied file. Adobe rates the attack as needing user interaction and conditions outside the attacker's control (local vector, high complexity). Teams with no Audition installed can skip it.","tier":"B","verified":{"fix":{"at":"2026-11-10T21:55:39Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/audition/apsb26-102.html","run_id":2884},"products":{"at":"2026-11-10T21:55:39Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/audition/apsb26-102.html","run_id":2884},"how_to_check":{"at":"2026-11-10T21:55:39Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/audition/apsb26-102.html","run_id":2884},"who_affected":{"at":"2026-11-10T21:55:39Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/audition/apsb26-102.html","run_id":2884}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["adobeaudition","audition"],"ptokens":["adobe","audition"],"labels":["adobeaudition","desktop","high","macos","other","windows"],"campaign_type":null,"search_a":"'-113560':14A,17A '-2026':13A,16A 'adob':1A 'adobe':18A 'attack':7A 'audit':2A 'audition':19A 'code':9A 'cve':12A,15A 'file':4A 'let':6A 'malici':3A 'open':5A 'run':8A 'user':11A","search_b":"'adob':21B,27B 'adobe-audit':20B 'arbitrari':40B 'attack':38B 'audit':22B,28B 'author':32B 'code':41B 'context':44B 'current':47B 'desktop':23B 'exploit':49B 'file':57B 'flaw':33B 'incorrect':31B 'let':36B 'maco':24B 'malici':56B 'open':54B 'requir':50B 'run':39B 'user':48B 'victim':52B 'window':26B","search_c":"'affect':60C 'arbitrari':70C,88C 'attack':81C,96C 'audit':58C 'author':64C 'beyond':94C 'chang':117C 'code':71C,89C 'condit':93C 'context':75C 'control':98C 'could':67C,82C 'current':78C 'depend':91C 'execut':72C,87C 'exploit':83C,90C,99C 'file':114C 'incorrect':63C 'interact':105C 'issu':102C 'malici':113C 'must':110C 'open':111C 'requir':103C 'result':68C 'scope':115C 'user':79C,104C 'victim':109C 'vulner':65C,85C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T21:18:49+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss_by":"psirt@adobe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-113560","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113560","severity":null,"published_at":"2026-11-10T21:18:49+00:00","modified_at":"2026-11-10T21:18:49+00:00","first_seen_at":"2026-11-10T21:46:13+00:00","fetched_at":"2026-11-10T21:46:13+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-113560:2884","url":"https://www.adobe.com/trust/security/products/audition/apsb26-102.html","severity":null,"published_at":"2026-11-10T21:55:39+00:00","modified_at":"2026-11-10T21:55:39+00:00","first_seen_at":"2026-11-10T21:55:39+00:00","fetched_at":"2026-11-10T21:55:39+00:00","note":"Read Adobe APSB26-102 (Nov 10 2026): affected 26.5 and earlier, 25.6.6 and earlier; fixed 27.0 and 26.5.3. No exploitation known. No repo-readable check (desktop app).","cites":["https://www.adobe.com/trust/security/products/audition/apsb26-102.html"]}],"documents":[{"id":119325,"url":"https://www.adobe.com/trust/security/products/audition/apsb26-102.html","title":"Adobe APSB26-102: Security update available for Adobe Audition","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}