High severity8.8NVD Advisory· Published Oct 27, 2026

CVE-2026-107672

Description

A maliciously crafted .stack.json file can trigger a trusted Markdown injection vulnerability in Autodesk Fusion Post Processor Utility Extension. A malicious actor may exploit this vulnerability to execute arbitrary commands in the context of the current user.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Autodesk/Fusion Post Processor Utility Extensionllm-create
Autodesk/hsm-post-processorllm-create

Patches

Vulnerability mechanics

References

marketplace.visualstudio.com/itemsnvd
www.autodesk.com/trust/security-advisories/adsk-sa-2026-0018nvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000