Adobe Photoshop Desktop Uncontrolled Search Path Element Vulnerability Leading to Arbitrary Code Execution

A vulnerability allowing arbitrary code execution has been identified in Adobe Photoshop Desktop versions 25.12, 26.1 and earlier. This issue arises from an Uncontrolled Search Path Element vulnerability, where an attacker can manipulate the search path environment variable to direct the application to a malicious library. When the application loads this library, it can execute arbitrary code. Exploitation of this vulnerability requires user interaction, as the victim must manually run the affected application.

Impact

Exploitation of this vulnerability could result in arbitrary code execution on the user's system.