CVE-2026-113775
Dynamic Library Loading Process Control in Autodesk Fusion Desktop
CVSS Score
7.8
EPSS Score
0.0%
EPSS Percentile
0th
A maliciously crafted dynamic library, when loaded from an arbitrary path through the TextCommands.LoadDll command exposed by the Autodesk Fusion API, can trigger an Exposed Dangerous Function vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to execute arbitrary code in the context of the current process.
| CWE | CWE-749 |
| Vendor | autodesk |
| Product | fusion |
| Published | Oct 27, 2026 |
Stay Ahead of the Next One
Get instant alerts for autodesk fusion
Be the first to know when new high vulnerabilities affecting autodesk fusion are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
Autodesk / Fusion
2705.1.30 < 2706.1.14
References
autodesk.com: https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0019 dl.appstreaming.autodesk.com: https://dl.appstreaming.autodesk.com/production/installers/Fusion%20Client%20Downloader.exe dl.appstreaming.autodesk.com: https://dl.appstreaming.autodesk.com/production/installers/Fusion%20Client%20Downloader.dmg