Skip to content
OpenAdvisories
High · 7.8 CVE-2025-5039 EUVD-2025-22536GHSA-4c85-w99g-9v4w

Privilege Ecalation due to Untrusted Search Path Vulnerability

Published Jul 24, 2025 · Updated May 28, 2026 · Assigned by autodesk

Description

A maliciously crafted binary file, when present while loading files in certain Autodesk applications, could lead to execution of arbitrary code in the context of the current process due to an untrusted search path being utilized.

Affected products

VendorProductAffectedFixed
Autodesk AutoCAD 2026 – < 2026.1 2026.1
Autodesk AutoCAD LT 2026 – < 2026.1 2026.1
Autodesk RealDWG 2026 – < 2026.0.2 2026.0.2
Autodesk 3ds Max 2027 – < 2027.1, 2026 – < 2026.3.3 2027.1

References