Vulnerability Description
A maliciously crafted binary file, when present while loading files in certain Autodesk applications, could lead to execution of arbitrary code in the context of the current process due to an untrusted search path being utilized.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Autodesk | Infrastructure Parts Editor | >= 2026, < 2026.0.2 |
| Autodesk | Inventor | >= 2026, < 2026.0.2 |
| Autodesk | Navisworks Manage | >= 2026, < 2026.0.2 |
| Autodesk | Navisworks Simulate | >= 2026, < 2026.0.2 |
| Autodesk | Revit | >= 2026, < 2026.0.2 |
| Autodesk | Vault | >= 2026, < 2026.0.2 |
Related Weaknesses (CWE)
References
- https://www.autodesk.com/products/autodesk-access/overview
- https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0014Vendor Advisory
FAQ
What is CVE-2025-5039?
CVE-2025-5039 is a vulnerability with a CVSS score of 7.8 (HIGH). A maliciously crafted binary file, when present while loading files in certain Autodesk applications, could lead to execution of arbitrary code in the context of the current process due to an untruste...
How severe is CVE-2025-5039?
CVE-2025-5039 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-5039?
Check the references section above for vendor advisories and patch information. Affected products include: Autodesk Infrastructure Parts Editor, Autodesk Inventor, Autodesk Navisworks Manage, Autodesk Navisworks Simulate, Autodesk Revit.