Read the docs
TI-2024-10615 Aliases CVE-2024-11454GHSA-vfjm-xw35-h45p

Untrusted Search Path vulnerability in Autodesk Revit

Priority LOW 35CWE-426Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-426.

Summary

A maliciously crafted DLL file, when placed in the same directory as an RVT file could be loaded by Autodesk Revit, and execute arbitrary code in the context of the current process due to an untrusted search patch being utilized.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00195 9th percentileScored 2026-11-07
Fix Fixed Revit (Autodesk): 2025.4

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
AutodeskRevit2025 to before 2025.42025.4Patch availableCNA
  • Revit VendorAutodesk Affected 2025 to before 2025.4 Fixed in 2025.4 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*2025 to before 2025.4VulnerableAutodesk
  • cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:* Versions 2025 to before 2025.4 Vulnerable ·Autodesk

Remediation

  • Fix · CNA Revit (Autodesk) Fixed in 2025.4

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-11454
  2. 2026-10-03 Alias added: GHSA-vfjm-xw35-h45p

References

Advisory 1

  • TI-2021-17343 Out-of-bounds write in Revit, Navisworks, Autodesk® Advance Steel, AutoCAD®, AutoCAD®… CVSS 3.1HIGH 7.8
  • TI-2021-17342 Out-of-bounds read in Revit, Navisworks, Autodesk® Advance Steel, AutoCAD®, AutoCAD®… CVSS 3.1HIGH 7.8
  • TI-2025-04516 RFA File Parsing Memory Corruption Vulnerability CVSS 3.1HIGH 7.8
  • TI-2025-02171 DWG File Parsing Stack-Based Buffer Vulnerability CVSS 3.1HIGH 7.8
  • TI-2025-01422 PDF File Parsing Heap-based Overflow Vulnerability CVSS 3.1HIGH 7.8
  • TI-2025-01091 PDF File Parsing Memory Corruption Vulnerability CVSS 3.1HIGH 7.8
See all 39 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences