CVE-2026-49836 psd-tools CVE debrief

Who should care

Defenders responsible for systems that process PSD files using psd-tools should assess exposure and prioritize verification and remediation. This includes operators, platform administrators, vulnerability management teams, and security teams who need to ensure the secure processing of PSD files.

Why it matters

CVE-2026-49836 allows path traversal and arbitrary file read in psd-tools, requiring defenders to verify and remediate vulnerable systems, especially those processing untrusted PSD files.

• Potential data exfiltration through arbitrary file read
• Possible code execution through path traversal
• Required verification of psd-tools version and remediation
• Potential impact on systems processing untrusted PSD files

Technical summary

The psd-tools package has a vulnerability that allows path traversal and arbitrary file read. Prior to version 1.17.1, the `SmartObject.save()` method writes an embedded smart object to a path taken verbatim from the PSD file, allowing an attacker to write to an arbitrary location. Additionally, the `SmartObject.open()` method allows an attacker-controlled `fullPath` descriptor to be used as an arbitrary file read path.

Defensive priority

Defenders should prioritize verifying and upgrading psd-tools to version 1.17.1 or later, and restrict access to untrusted PSD files.

Recommended defensive actions

• Verify psd-tools version and upgrade to 1.17.1 or later
• Restrict access to untrusted PSD files
• Monitor for potential exploitation attempts
• Review compensating controls for exposed systems
• Check relevant monitoring, detection, and logs for exposed assets
• Track exceptions and retest remediated assets
• Confirm whether affected product deployments exist in managed environments

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, but the scope of affected versions and potential impact require further verification. The vulnerability allows path traversal and arbitrary file read, which could lead to data exfiltration and code execution. Defenders should verify psd-tools version and restrict access to untrusted PSD files.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.