CVE-2025-1068

Name of the Vulnerable Software and Affected Versions Esri ArcGIS AllSource versions 1.2 through 1.3

Description The issue is related to an untrusted search path vulnerability that could allow a low-privileged attacker with write privileges to the local file system to introduce a malicious executable. This executable could run malicious commands under the context of the victim when a specific action is performed using the software.

Recommendations For Esri ArcGIS AllSource versions 1.2 through 1.3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.