Adobe Commerce is affected by an Improper Input Validation vulnerability that allows an attacker with high privileges to execute arbitrary code in the context of the current user. The flaw does not require user interaction and changes the scope of the affected component. The potential impact is the compromise of confidentiality, integrity, and availability of the system because malicious code can run with the privileges of the user that triggered the input.

The vulnerability affects Adobe Commerce, Adobe Commerce B2B, and Magento Open Source. No specific version information is listed in the data provided.

The CVSS score is 8.7, indicating high severity. EPSS data is not available, and the vulnerability is not listed in CISA's KEV catalog. The likely attack vector requires an attacker to have high‑privilege access to the target instance; no user interaction is needed, and the scope change indicates that the compromise could spread beyond the initial component if not contained.