CVE-2025-12792 | Canva up to 1.117.0 on macOS default permission

November 18, 2025 Yanac

A vulnerability classified as critical has been found in Canva up to 1.117.0 on macOS. Affected by this issue is some unknown functionality. Performing manipulation results in incorrect default permissions.

This vulnerability is identified as CVE-2025-12792. The attack is only possible with local access. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More