Adobe Dimension: Untrusted search path allows code execution
Summary
Adobe Dimension 4.1.8 and earlier on Windows and macOS contains an untrusted search path vulnerability (CWE-426). A local attacker can plant a file, such as a malicious DLL, where Dimension loads it, and execute arbitrary code in the context of the current user. Exploitation requires that a victim runs the application. Adobe classifies the issue as High with a CVSS score of 8.6.
Affected
- Adobe Dimension 4.1.8 and earlier
- Windows and macOS
Fixed in
- Adobe Dimension 4.1.9 (Adobe security bulletin APSB26-171)
Workaround
- No vendor workaround known beyond the update.
- Until patched: do not open Dimension project files from untrusted sources.
- Until patched: do not run Dimension from user-writable or shared folders.
Exploitation
- Adobe is not aware of any exploits in the wild.
- Not listed in CISA KEV.
- No public proof of concept found.
- CISA SSVC: exploitation none, automatable no, technical impact total.
Our recommendation
- Inventory Dimension installations on Windows and macOS workstations.
- Update Dimension to 4.1.9 via Creative Cloud, prioritised with the other APSB26-171 fixes.
- Until updated, limit Dimension use to trusted files and trusted folders.
- Note that Adobe rates this update as priority 3.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- Adobe Security Bulletin APSB26-171 www.adobe.com
- Tenable plugin 365770 www.tenable.com
- Zero Day Initiative October 2026 security update review www.zerodayinitiative.com
- Strix CVE-2026-103847 www.strix.ai
- CNA record via Vulners vulners.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 1 Nov 2026, 08:24.
Original description (NVD)
Dimension is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. A local attacker with user permissions could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must run the application. Scope is changed.
NVD references (1)
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.