Product:
Substance3D – Designer
Summary
Substance3D – Designer versions 15.1.0 and earlier are affected by a Path Traversal vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation requires user interaction, as a victim must open a malicious file.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.3 | CVE-2026-34664 |
Exploitation
To exploit this vulnerability, an attacker must craft a malicious file that, when opened by the victim, triggers the path traversal condition. This allows the attacker to read files from the file system that should be restricted, thereby gaining access to sensitive information.
Affected Products
- Substance3D – Designer versions 15.1.0 and earlier: Vulnerable to path traversal, allowing unauthorized file access.
Mitigation
Users are advised to avoid opening untrusted files and to update to the latest version of Substance3D – Designer to mitigate this vulnerability. Regularly reviewing file permissions and access controls can also help reduce the risk of exploitation.