Advisories · Technology

lightsyncpro LightSync Pro – Connect & Sync Cloud Assets | Lightroom, Canva, Figma, Dropbox & Shutterstock.

Every CVE that names lightsyncpro LightSync Pro – Connect & Sync Cloud Assets | Lightroom, Canva, Figma, Dropbox & Shutterstock among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-6147 CVE record

CVSS 8.8 High

LightSync Pro <= 2.1.6 - Authenticated (Author+) Arbitrary File Upload
- lightsyncpro LightSync Pro – Connect & Sync Cloud Assets | Lightroom, Canva, Figma, Dropbox & Shutterstock
- Unrestricted file upload
Not analysed yet 5 Aug 2026