Product:
CAI Content Credentials
Summary
CAI Content Credentials versions 0.78.2, 0.7.0 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.2 | CVE-2026-34668 |
Exploitation
An attacker can exploit this vulnerability by sending specially crafted input to the application, which can trigger the improper input validation. This can lead to a crash of the application, resulting in a denial-of-service condition. Since no user interaction is required, the attack can be executed remotely.
Affected Products
- CAI Content Credentials versions 0.78.2 and 0.7.0: These versions are vulnerable to denial-of-service attacks due to improper input validation.
Mitigation
To mitigate this vulnerability, users should update to the latest version of CAI Content Credentials that addresses the improper input validation issue. Regularly checking for updates and applying them promptly can help prevent exploitation.