Substance3D Painter Untrusted Search Path to Code Exec (CVE-2026-75768)
CVE-2026-75768 Published on August 25, 2026

Substance3D - Painter | Untrusted Search Path (CWE-426)
Substance3D - Painter is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vendor Advisory NVD

Vulnerability Analysis

CVE-2026-75768 is exploitable with local system access, requires user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.

Attack Vector:
LOCAL
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
REQUIRED
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH

Weakness Type

What is an Untrusted Path Vulnerability?

The application searches for critical resources using an externally-supplied search path that can point to resources that are not under the application's direct control.

CVE-2026-75768 has been classified to as an Untrusted Path vulnerability or weakness.


Products Associated with CVE-2026-75768

Want to know whenever a new CVE is published for Adobe Substance 3d Painter? stack.watch will email you.

Adobe Substance 3d Painter
 

Affected Versions

Adobe Substance3D - Painter: