CVEvulnerability

CVE-2026-10789

9.6 CRITICAL Published 2026-06-22 Modified 2026-10-25 Official page ↗

Status: Analyzed
Published: 2026-06-22
Last modified: 2026-10-25
Assigner: [email protected]
CVSS 3.1 ([email protected]): 9.6 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Weaknesses: CWE-94

Description

A maliciously crafted webpage, when visited by a user with Autodesk Fusion Desktop running and the MCP extension enabled, can trigger a vulnerability in the MCP extension that could allow arbitrary code execution. A successful exploit may allow code to execute with the privileges of the current user.

Affected configurations

• autodesk fusion (< 2703.1.20)

Weakness · CWE (1)

CWE-94 Improper Control of Generation of Code weakness

References

https://dl.appstreaming.autodesk.com/production/installers/Fusion%20Client%20Downloader.dmg Product
https://dl.appstreaming.autodesk.com/production/installers/Fusion%20Client%20Downloader.exe Product
https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0008 Vendor Advisory, Patch

CVE-2026-10789

Description

Affected configurations

Related

Weakness · CWE (1)

References