Uncontrolled Search Path Element Flaw in Substance3D Modeler by Adobe

CVE-2025-49571

What is CVE-2025-49571?

Substance3D Modeler versions 1.22.0 and earlier are susceptible to an uncontrolled search path element vulnerability. This flaw allows attackers to manipulate the search paths utilized by the application to locate essential resources. By redirecting these paths, an attacker can execute arbitrary code with the privileges of the current user, leading to potentially severe security risks. Remarkably, successful exploitation does not necessitate any interaction from the user, emphasizing the critical nature of this vulnerability.

References