ZDI-CAN-29867: ZDI-26-420: Adobe Creative Cloud AGSService Incorrect Permission Assignment Local Privilege Escalation Vulnerability

Published Jul 15, 2026

Updated

This vulnerability allows local attackers to escalate privileges on affected installations of Adobe Creative Cloud Desktop Application. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-48344.

Affected Software

1 affected component

Adobe Adobe Creative Cloud Desktop Application

Event History

Jul 15, 2026

Advisory Published

via ZDI·05:00 AM

Data Sourced

via ZDI·05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-29867?

ZDI-CAN-29867 has a CVSS score indicating a risk severity of 51.

How do I fix ZDI-CAN-29867?

To fix ZDI-CAN-29867, update your Adobe Creative Cloud Desktop Application to the latest version provided by Adobe.

What types of systems are affected by ZDI-CAN-29867?

ZDI-CAN-29867 affects installations of the Adobe Creative Cloud Desktop Application.

Who can exploit ZDI-CAN-29867?

ZDI-CAN-29867 can be exploited by local attackers who have the ability to execute low-privileged code on the target system.

What is the impact of ZDI-CAN-29867?

The impact of ZDI-CAN-29867 is local privilege escalation, allowing an attacker to gain higher privileges on the affected system.