CVE-2026-48290

Name of the Vulnerable Software and Affected Versions CAI Content Credentials (affected versions not specified)

Description A Server-Side Request Forgery (SSRF) issue exists that could lead to arbitrary code execution within the context of the current user. This flaw allows an attacker to inject malicious scripts into a web page, which may result in elevated access or control over the victim's account or session. Successful exploitation requires user interaction, such as visiting a maliciously crafted URL or interacting with a compromised web page.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.