{"id":"CVE-2026-121349","kind":"vulnerability","aliases":["CVE-2026-121349"],"related":[],"title":"Adobe Connect 12.12 and earlier on Windows: path traversal (CVE-2026-121349), fixed in APSB26-191","description":"Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to gain elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.","summary":"Adobe fixed a critical path traversal (CWE-22, CVSS 9.6) in Adobe Connect on Windows in bulletin APSB26-191 (Nov 10 2026). It needs a low-privileged account and no user interaction. Adobe lists the impact as privilege escalation (not code execution). Adobe is not aware of exploitation.","severity":"critical","cvss":9.6,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Adobe Connect","fixed":["12.12.a","12.11.i","12.10.f","12.9.a","12.8.a"],"affected":"<= 12.12 (Windows)","ecosystem":"vendor"}],"ecosystems":[],"tags":["adobe-connect","on-premise","other","path-traversal","self-hosted","windows"],"not_affected_if":["managed-hosting"],"how_to_check":"Check your self-hosted Adobe Connect server version. If it is 12.12 or earlier on Windows and not on 12.12.a, 12.11.i, 12.10.f, 12.9.a or 12.8.a (matching your release line) or later, you are exposed. Also check Connect on other platforms: the bulletin lists only Windows.","fix":"Install the Adobe Connect patch from the on-premise patch page for your release line: 12.12.a, 12.11.i, 12.10.f, 12.9.a or 12.8.a (Windows).","status":"open","published_at":"2026-11-10T22:18:24+00:00","first_seen_at":"2026-11-10T22:27:26+00:00","triaged_at":"2026-11-10T22:28:45+00:00","updated_at":"2026-11-10T22:35:52+00:00","category":"other","confidence":0.85,"triage":{"at":"2026-11-10T22:28:45Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Adobe Connect: path traversal lets low-privileged users run code","impact":"high","summary":"Adobe Connect has a path traversal flaw that lets an attacker with a low-privilege account reach files outside the intended directory. The sources say it can lead to arbitrary code execution in the current user's context and takeover of the victim's account or session, with no user interaction needed.","audience":"businesses","category":"other","nicknames":[],"who_cares":["adobe-connect","self-hosted"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"Attacker runs code and takes over user sessions","analyst_note":"Find the Adobe security bulletin for CVE-2026-121349 to get affected and fixed versions, hosted versus self-hosted scope, and whether any fix exists.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Organizations that run Adobe Connect servers are exposed. The sources do not name affected versions or say whether hosted Adobe Connect is affected, so the vendor advisory is needed to confirm scope.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000682,"input_tokens":4589,"output_tokens":447,"severity_before":"critical"},"analyst_status":"done","analyst_note":"Find the Adobe security bulletin for CVE-2026-121349 to get affected and fixed versions, hosted versus self-hosted scope, and whether any fix exists.","search":"'-121349':12A,19A,22A '-191':16A,57B '-2026':11A,18A,21A '-22':46B '10':59B '12.12':3A '2026':60B '9.6':48B 'access':132C 'account':67B,139C 'adob':1A,26B,39B,50B,72B,82B,88C 'adobe':23A 'adobe-connect':25B 'affect':91C 'apsb26':15A,56B 'arbitrari':110C 'attack':124C 'awar':85B 'bulletin':55B 'chang':153C 'code':80B,111C 'connect':2A,24A,27B,51B,89C 'context':115C 'control':134C 'could':107C,125C 'critic':42B 'current':118C 'cve':10A,17A,20A 'cvss':47B 'cwe':45B 'directori':102C 'earlier':5A 'elev':131C 'escal':78B 'execut':81B,112C 'exploit':87B,126C,142C 'fix':13A,40B 'gain':130C 'host':37B 'impact':75B 'improp':94C 'interact':71B,150C 'issu':145C 'limit':95C 'list':73B 'low':65B,122C 'low-privileg':64B,121C 'need':62B 'nov':58B 'on-premis':28B 'path':8A,33B,43B,103C 'path-travers':32B 'pathnam':98C 'premis':30B 'privileg':66B,77B,123C 'requir':148C 'restrict':101C 'result':108C 'scope':151C 'self':36B 'self-host':35B 'session':141C 'travers':9A,34B,44B,104C 'user':70B,119C,149C 'victim':137C 'vulner':105C,128C 'window':7A,38B,53B","nicknames":[],"mitigations":[],"who_affected":"Organizations that run Adobe Connect servers are exposed. The sources do not name affected versions or say whether hosted Adobe Connect is affected, so the vendor advisory is needed to confirm scope.","tier":"B","verified":{"fix":{"at":"2026-11-10T22:35:52Z","by":"analyst","doc":"https://helpx.adobe.com/adobe-connect/kb/connect-on-prem-patches.html","run_id":3003},"products":{"at":"2026-11-10T22:35:52Z","by":"analyst","doc":"https://helpx.adobe.com/adobe-connect/kb/connect-on-prem-patches.html","run_id":3003}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["adobeconnect","connect"],"ptokens":["adobe","connect"],"labels":["adobeconnect","critical","onpremise","other","pathtraversal","selfhosted","windows"],"campaign_type":null,"search_a":"'-121349':12A,19A,22A '-191':16A '-2026':11A,18A,21A '12.12':3A 'adob':1A 'adobe':23A 'apsb26':15A 'connect':2A,24A 'cve':10A,17A,20A 'earlier':5A 'fix':13A 'path':8A 'travers':9A 'window':7A","search_b":"'-191':57B '-22':46B '10':59B '2026':60B '9.6':48B 'account':67B 'adob':26B,39B,50B,72B,82B 'adobe-connect':25B 'apsb26':56B 'awar':85B 'bulletin':55B 'code':80B 'connect':27B,51B 'critic':42B 'cvss':47B 'cwe':45B 'escal':78B 'execut':81B 'exploit':87B 'fix':40B 'host':37B 'impact':75B 'interact':71B 'list':73B 'low':65B 'low-privileg':64B 'need':62B 'nov':58B 'on-premis':28B 'path':33B,43B 'path-travers':32B 'premis':30B 'privileg':66B,77B 'self':36B 'self-host':35B 'travers':34B,44B 'user':70B 'window':38B,53B","search_c":"'access':132C 'account':139C 'adob':88C 'affect':91C 'arbitrari':110C 'attack':124C 'chang':153C 'code':111C 'connect':89C 'context':115C 'control':134C 'could':107C,125C 'current':118C 'directori':102C 'elev':131C 'execut':112C 'exploit':126C,142C 'gain':130C 'improp':94C 'interact':150C 'issu':145C 'limit':95C 'low':122C 'low-privileg':121C 'path':103C 'pathnam':98C 'privileg':123C 'requir':148C 'restrict':101C 'result':108C 'scope':151C 'session':141C 'travers':104C 'user':119C,149C 'victim':137C 'vulner':105C,128C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T22:18:24+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","cvss_by":"psirt@adobe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-121349","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-121349","severity":null,"published_at":"2026-11-10T22:18:24+00:00","modified_at":"2026-11-10T22:18:24+00:00","first_seen_at":"2026-11-10T22:27:26+00:00","fetched_at":"2026-11-10T22:27:26+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-121349:3003","url":"https://www.adobe.com/trust/security/products/connect/apsb26-191.html","severity":null,"published_at":"2026-11-10T22:35:52+00:00","modified_at":"2026-11-10T22:35:52+00:00","first_seen_at":"2026-11-10T22:35:52+00:00","fetched_at":"2026-11-10T22:35:52+00:00","note":"Read Adobe APSB26-191 (primary): CVE-2026-121349 listed as path traversal, impact privilege escalation, CVSS 9.6, PR:L; affected 12.12 and earlier Windows; fixes per line. Title corrected from code execution to match Adobe's impact. Hosted-service status not stated in bulletin; who_affected/how_to_check not verified. No social search.","cites":["https://www.adobe.com/trust/security/products/connect/apsb26-191.html","https://helpx.adobe.com/adobe-connect/kb/connect-on-prem-patches.html"]}],"documents":[{"id":119650,"url":"https://www.adobe.com/trust/security/products/connect/apsb26-191.html","title":"APSB26-191 Security update available for Adobe Connect","kind":"advisory","source":"analyst","publisher":null,"text":"Adobe priority 2 update, Nov 10 2026. Affected: Adobe Connect 12.12 and earlier, Windows. Updated versions: 12.12.a, 12.11.i, 12.10.f, 12.9.a, 12.8.a. CVE-2026-121354: Path Traversal CWE-22, impact listed by Adobe: arbitrary code execution, critical, CVSS 9.9 AV:N/AC:L/PR:L/UI:N/S:C. Credit: edra. Adobe not aware of exploits in the wild.","published_at":null,"relation":"advisory","confidence":null,"note":null},{"id":119653,"url":"https://helpx.adobe.com/adobe-connect/kb/connect-on-prem-patches.html","title":"Find on-premise patch files for Adobe Connect 9-12","kind":"vendor","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"fix","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}