Adobe Connect Deserialization Vulnerability Leading to Arbitrary Code Execution

A deserialization vulnerability allowing arbitrary code execution has been identified in Adobe Connect versions 2025.3, 12.10 and earlier. This vulnerability arises from the deserialization of untrusted data, and exploitation occurs in the context of the current user without requiring user interaction.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution on the affected system.

Remediation

Users are advised to update Adobe Connect to version 12.11 or the Adobe Connect Desktop Application to version 2025.9. Release notes for these updates are available on the Adobe website.