Advisory · CVE-2026-34689
Path traversal in Adobe Connect exposes arbitrary files
A path traversal flaw in Adobe Connect lets an unauthenticated attacker read arbitrary files outside the intended scope. CVSS 8.6.
- Vendor
- Adobe
- Product
- Adobe Connect
- Identifier / CWE
- CVE-2026-34689
CWE-22 - Action timing
- Immediate
Explain it like I’m five
A file clerk fetches folders by number from a locked room, but accepts requests like go up two floors and take that folder instead. Anyone can ask for any folder in the building.
- 01No credentials
An unauthenticated attacker reaches the vulnerable Adobe Connect endpoint.
- 02Traversal input
They supply a pathname containing directory-traversal sequences.
- 03Scope escaped
The application fails to confine the path to its restricted directory.
- 04Files read
The attacker reads arbitrary files and directories outside the intended scope.
What happened
Adobe security bulletin APSB26-150 includes CVE-2026-34689, a path traversal vulnerability (CWE-22) in Adobe Connect. An unauthenticated attacker can exploit it without user interaction to read arbitrary files outside the intended access scope. Adobe Connect up to and including 12.11 and the Android mobile app up to and including 4.4; fixed in 12.11.1 / 12.12 and Android app 4.5. NVD rates it CVSS 8.6 (v3.1).
What to do
- Upgrade Adobe Connect to 12.11.1 or 12.12 (and the Android app to 4.5); internet-facing instances first since no credentials are needed.
- Review access logs for traversal patterns such as ../ sequences.
- Rotate secrets and credentials stored on the Connect host, since file reads could have exposed them.
Management note
Unauthenticated file read on a collaboration server is a configuration-and-secrets exposure risk. Assume readable files were read and rotate accordingly.