Installer CVE-2025-5335

This vulnerability stems from CWE-426 (Untrusted Search Path), a well-known class of privilege escalation flaws where applications search for dependencies or binaries in directories that an unprivileged attacker can modify. The Autodesk Installer application fails to validate the integrity or source of binary files during the installation or update process, allowing an attacker to place a malicious binary in a predictable search path (typically %PATH%, current directory, or application-specific directories). When the installer executes and searches for required binaries or libraries without absolute path validation or signature verification, it loads the attacker-controlled malicious binary instead of the legitimate one, executing arbitrary code with the elevated privileges (NT AUTHORITY/SYSTEM) that the installer process runs under. This is a classic DLL hijacking or path injection attack pattern common in Windows software.