Home

Description

A maliciously crafted binary file, when present while loading files in certain Autodesk applications, could lead to execution of arbitrary code in the context of the current process due to an untrusted search path being utilized.

PUBLISHED Reserved 2025-05-21 | Published 2025-07-24 | Updated 2026-05-28 | Assigner autodesk




HIGH: 7.8CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Problem types

CWE-426 Untrusted Search Path

Product status

Default status
unaffected

2026 (custom) before 2026.1
affected

Default status
unaffected

2026 (custom) before 2026.1
affected

Default status
unaffected

2026 (custom) before 2026.0.2
affected

Default status
unaffected

2027 (custom) before 2027.1
affected

2026 (custom) before 2026.3.3
affected

References

www.autodesk.com/products/autodesk-access/overview patch

www.autodesk.com/trust/security-advisories/adsk-sa-2025-0014 vendor-advisory

cve.org (CVE-2025-5039)

nvd.nist.gov (CVE-2025-5039)

Download JSON