Riskcovery

CVE-2025-5039

Privilege Ecalation due to Untrusted Search Path Vulnerability

State
Published
Severity
7.8 High
Published
Jul 24, 2025
Updated
May 28, 2026
Reserved
May 21, 2025

Read the record on cve.org

Description

A maliciously crafted binary file, when present while loading files in certain Autodesk applications, could lead to execution of arbitrary code in the context of the current process due to an untrusted search path being utilized.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hautodesk

Weaknesses

Affected Products

ProductVersions
AutoCADAutodesk
  • 2026 to before 2026.1Affected
AutoCAD LTAutodesk
  • 2026 to before 2026.1Affected
RealDWGAutodesk
  • 2026 to before 2026.0.2Affected
3ds MaxAutodesk
  • 2027 to before 2027.1Affected
  • 2026 to before 2026.3.3Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.