CVE-2025-5039
High
Description
A maliciously crafted binary file, when present while loading files in certain Autodesk applications, could lead to execution of arbitrary code in the context of the current process due to an untrusted search path being utilized.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Autodesk Infrastructure Parts Editor
PublishedJul 24, 2025
First seenJul 24, 2025
Weakness typeCWE-426CWE-426
How to fix
Update
- autodesk infrastructure_parts_editor2026.0.2 or later
- autodesk inventor2026.0.2 or later
- autodesk navisworks_manage2026.0.2 or later
- autodesk navisworks_simulate2026.0.2 or later
- autodesk revit2026.0.2 or later
- autodesk vault2026.0.2 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| autodesk infrastructure_parts_editor | 2026 ≤ v < 2026.0.2 | 2026.0.2 |
| autodesk inventor | 2026 ≤ v < 2026.0.2 | 2026.0.2 |
| autodesk navisworks_manage | 2026 ≤ v < 2026.0.2 | 2026.0.2 |
| autodesk navisworks_simulate | 2026 ≤ v < 2026.0.2 | 2026.0.2 |
| autodesk revit | 2026 ≤ v < 2026.0.2 | 2026.0.2 |
| autodesk vault | 2026 ≤ v < 2026.0.2 | 2026.0.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.