Adobe Photoshop Desktop up to 25.12/26.1 Environment Variable uncontrolled search path

Summaryinfo

A vulnerability described as critical has been identified in Adobe Photoshop Desktop up to 25.12/26.1. This impacts an unknown function of the component Environment Variable Handler. The manipulation results in uncontrolled search path. This vulnerability was named CVE-2025-21127. The attack needs to be approached locally. There is no available exploit. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability, which was classified as critical, was found in Adobe Photoshop Desktop up to 25.12/26.1. Affected is an unknown code block of the component Environment Variable Handler. The manipulation with an unknown input leads to a uncontrolled search path vulnerability. CWE is classifying the issue as CWE-427. The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

Photoshop Desktop versions 25.12, 26.1 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could lead to arbitrary code execution. An attacker could manipulate the search path environment variable to point to a malicious library, resulting in the execution of arbitrary code when the application loads. Exploitation of this issue requires user interaction in that a victim must run the vulnerable application.

The advisory is shared for download at helpx.adobe.com. This vulnerability is traded as CVE-2025-21127 since 12/04/2024. The exploitability is told to be easy. The attack needs to be approached locally. There are neither technical details nor an exploit publicly available. The MITRE ATT&CK project declares the attack technique as T1574.

The vulnerability scanner Nessus provides a plugin with the ID 214087 (Adobe Photoshop 25.x < 25.12.1 / 26.x < 26.2 Multiple Vulnerabilities (macOS APSB25-02)), which helps to determine the existence of the flaw in a target environment.

Upgrading eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (214087). Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Image Processing Software

Vendor

• Adobe

Name

• Photoshop Desktop

Version

• 25.0
• 25.1
• 25.2
• 25.3
• 25.4
• 25.5
• 25.6
• 25.7
• 25.8
• 25.9
• 25.10
• 25.11
• 25.12
• 26.0
• 26.1

License

• commercial

Website

• Vendor: https://www.adobe.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion