What is CVE-2024-11454?

CVE-2024-11454 is a high-severity vulnerability in Autodesk Revit, classified under Untrusted Search Path. CVSS score: 7.8/10. Published 2024-12-09.

How severe is CVE-2024-11454?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Autodesk Revit

CVE-2024-11454

A maliciously crafted DLL file, when placed in the same directory as an RVT file could be loaded by Autodesk Revit, and execute arbitrary code in the context of the current process due to an untrusted search patch being utilized.

EPSS: 0.002 (9.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Autodesk Revit — versions 2025

Weakness classification (CWE)

CWE-426 — Untrusted Search Path

References

psirt@autodesk.com (Vendor Advisory)

Frequently asked questions

What is CVE-2024-11454?: CVE-2024-11454 is a high-severity vulnerability in Autodesk Revit, classified under Untrusted Search Path. CVSS score: 7.8/10. Published 2024-12-09.
How severe is CVE-2024-11454?: High severity. CVSS v3 base score is 7.8 out of 10.