A maliciously crafted dynamic library, when loaded from an arbitrary path through the TextCommands.LoadDll command exposed by the Autodesk Fusion API, can trigger an Exposed Dangerous Function vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to execute arbitrary code in the context of the current process.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 6
- StatusAwaiting Analysis → PublishedNVD modified 2026-10-29 03:56
- StatusPublished → Awaiting AnalysisNVD modified 2026-10-28 15:21
- StatusReceived → PublishedNVD modified 2026-10-27 16:06
- Cpes-1 CPE criteria (now 0)NVD modified 2026-10-27 17:16
- StatusPublished → ReceivedNVD modified 2026-10-27 17:16
- First seenCVSS 7.8 · autodeskNVD modified 2026-10-27 16:06
Affected (CPE criteria) 0
NVD has not attached CPE configurations yet.