CVE-2025-1068

Summary

CVE-2025-1068 is an untrusted search path vulnerability affecting Esri ArcGIS AllSource 1.2 and 1.3. A low privileged attacker with write access to the local file system can exploit this issue by introducing a malicious executable. Upon performing a specific action in ArcGIS AllSource, the compromised file could execute and run malicious commands under the victim's context. The vulnerability has been addressed in the updates ArcGIS AllSource 1.2.1 and 1.3.1.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.