← Back to CVE search

CVE-2026-48350

Animate

Description

Animate is affected by an Improper Limitation of a Pathname to a Restricted Directory (-Path Traversal-) vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to access sensitive files or directories outside the intended restrictions. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

CVSS 8.6EPSS 0.197%Risk 0.88
View source
Published
2026-07-14 20:17:08
Affected versions
unknown
Type
Other
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Operating systems
Windows; MacOS