Product:
CAI Content Credentials
Summary
CAI Content Credentials are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.2 | CVE-2026-34669 |
Exploitation
To exploit this vulnerability, an attacker can send specially crafted input to the application, which may lead to a crash. Since the attack complexity is low and does not require user interaction, it can be executed easily by an attacker with local access to the system.
Affected Products
- CAI Content Credentials versions 0.78.2 and 0.7.0 and earlier are vulnerable to denial-of-service attacks due to improper input validation.
Mitigation
To mitigate this vulnerability, users should update to the latest version of CAI Content Credentials as soon as it becomes available. Regularly monitoring for updates and applying security patches can help prevent exploitation of this and similar vulnerabilities.