VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 24, 2025· Updated Feb 26, 2026

Privilege Ecalation due to Untrusted Search Path Vulnerability

CVE-2025-5039

Description

A maliciously crafted binary file, when present while loading files in certain Autodesk applications, could lead to execution of arbitrary code in the context of the current process due to an untrusted search path being utilized.

Affected products

11
  • Autodesk/Advance Steelcpe-rescue
    cpe:2.3:a:autodesk:advance_steel:2026:*:*:*:*:*:*:*
    Range: 2026
  • Autodesk/Autocadv52 versions
    cpe:2.3:a:autodesk:autocad:2026:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:autodesk:autocad:2026:*:*:*:*:*:*:*range: 2026
    • cpe:2.3:a:autodesk:autocad_lt:2026:*:*:*:*:*:*:*range: 2026
  • Autodesk/Autocad Architecturecpe-rescue
    cpe:2.3:a:autodesk:autocad_architecture:2026:*:*:*:*:*:*:*
    Range: 2026
  • Autodesk/Autocad Electricalcpe-rescue
    cpe:2.3:a:autodesk:autocad_electrical:2026:*:*:*:*:*:*:*
    Range: 2026
  • Autodesk/Autocad Map 3dcpe-rescue
    cpe:2.3:a:autodesk:autocad_map_3d:2026:*:*:*:*:*:*:*
    Range: 2026
  • Autodesk/Autocad Mechanicalcpe-rescue
    cpe:2.3:a:autodesk:autocad_mechanical:2026:*:*:*:*:*:*:*
    Range: 2026
  • Autodesk/Autocad Mepcpe-rescue
    cpe:2.3:a:autodesk:autocad_mep:2026:*:*:*:*:*:*:*
    Range: 2026
  • Autodesk/Autocad Plant 3dcpe-rescue
    cpe:2.3:a:autodesk:autocad_plant_3d:2026:*:*:*:*:*:*:*
    Range: 2026
  • Autodesk/Civil 3Dcpe-rescue
    cpe:2.3:a:autodesk:civil_3d:2026:*:*:*:*:*:*:*
    Range: 2026
  • Autodesk/RealDWGv5
    cpe:2.3:a:autodesk:realdwg:2026:*:*:*:*:*:*:*
    Range: 2026

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.