Adobe Illustrator Untrusted Search Path Vulnerability Allowing Arbitrary Code Execution

A vulnerability exists in Adobe Illustrator versions 29.8.3, 30.0 and earlier, due to an untrusted search path that could lead to arbitrary code execution in the context of the current user. This issue arises when the application uses a search path to find essential resources. An attacker could manipulate this search path to direct the application to a malicious program, which would then be executed. Exploitation of this vulnerability requires user interaction, as a victim must open a malicious file.

Impact

Exploitation of this vulnerability could result in arbitrary code execution on the affected user's system.

Remediation

Users are advised to update to Illustrator version 29.8.4 or above for the 2025 release, or version 30.1 or above for the 2026 release. The update can be downloaded from the Adobe Download Page.