Adobe Framemaker versions 2022.8 and earlier contain a critical untrusted search path vulnerability that allows for arbitrary code execution.

This is an untrusted search path vulnerability (CWE-426) where the application improperly validates the path used to locate resources. An attacker can manipulate this search path to force the application to execute a malicious program, which does not require the attacker to have existing privileges or user interaction.

The ability for an attacker to execute arbitrary code grants them the capacity to take full control over the affected workstation or server. Given the CVSS score of 8.6, this flaw poses a high risk of total system compromise, data theft, and potential lateral movement within the corporate network.

Immediate Action: Update Adobe Framemaker to version 2022.9 or later to fully resolve the underlying untrusted search path issue.

Proactive Monitoring: Audit environment variables and search paths on systems running Framemaker for unauthorized modifications or unexpected entries.

Compensating Controls: Implement strict application whitelisting and restrict write access to directories that are included in the global system search path to prevent the injection of malicious binaries.

Public Exploit Available: No (exploit_available: false)

Organizations should prioritize the deployment of the vendor-supplied update to version 2022.9. Failure to patch this vulnerability leaves endpoints susceptible to code execution attacks if an adversary can influence the application search path, making immediate remediation essential to maintaining a secure environment.