CVE-2010-5257: Multiple untrusted search path vulnerabilities in ArchiCAD 13 and 14 allow local users to gain privileges v...

Security readout for executives and security teams

This is an old local privilege-escalation issue reported in ArchiCAD 13 and 14. If a user opens an associated file from an unsafe folder, the application may load attacker-placed DLL files from that folder instead of trusted system locations. The public record does not provide CVSS, a vendor fix, or evidence of active exploitation. Exposure is most likely limited to endpoints still running ArchiCAD 13 or 14 and opening relevant files from user-writable, shared, downloaded, or otherwise untrusted directories. Treat this as a legacy endpoint hygiene issue unless ArchiCAD 13 or 14 remains in active use. Prioritize confirming exposure and retiring or controlling unsupported installations. Mitigation focus: Inventory endpoints for ArchiCAD 13 and 14 installations.; Check Graphisoft or vendor guidance for supported updates or workarounds.; Remove or isolate unsupported legacy ArchiCAD versions where feasible..

Prepared

Jun 28, 2026, 00:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.