Code execution via attacker-controlled search path

Untrusted search path handling in Adobe FrameMaker 2022.8 and earlier allows local users to execute code in the current user's context. The disclosed locus is the critical-resource search path, which accepts an attacker-modified location and executes the selected malicious program. Local access is required, but Adobe's materials conflict on user interaction; the specific component and trigger remain undisclosed.