CVE-2021-40720: Adobe Ops-CLI

Critical severity, CVSS 9.8. EPSS: 9.5% chance of exploitation in the next 30 days.

Ops CLI version 2.0.4 (and earlier) is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary code execution when the checkout_repo function is called on a maliciously crafted file. An attacker can leverage this to execute arbitrary code on the victim machine.

Affected products

• Adobe Ops-CLI: before 2.0.5 (fixed in 2.0.5)

Published 2021-10-15. Last modified 2026-06-17.