CVEvulnerability

CVE-2025-5039

7.8 HIGH Published 2025-07-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2025-07-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-426

Description

A maliciously crafted binary file, when present while loading files in certain Autodesk applications, could lead to execution of arbitrary code in the context of the current process due to an untrusted search path being utilized.

Affected configurations

• autodesk infrastructure parts editor (>= 2026 < 2026.0.2) • autodesk inventor (>= 2026 < 2026.0.2) • autodesk navisworks manage (>= 2026 < 2026.0.2) • autodesk navisworks simulate (>= 2026 < 2026.0.2) • autodesk revit (>= 2026 < 2026.0.2) • autodesk vault (>= 2026 < 2026.0.2)

Related

Weakness · CWE (1)

  • CWE-426 Untrusted Search Path weakness

References