High severity7.8NVD Advisory· Published Oct 27, 2026

CVE-2026-113775

Description

A maliciously crafted dynamic library, when loaded from an arbitrary path through the TextCommands.LoadDll command exposed by the Autodesk Fusion API, can trigger an Exposed Dangerous Function vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to execute arbitrary code in the context of the current process.

Affected products

Autodesk/Fusion desktop applicationllm-fuzzy

Patches

Vulnerability mechanics

References

dl.appstreaming.autodesk.com/production/installers/Fusion%20Client%20Downloader.dmgnvd
dl.appstreaming.autodesk.com/production/installers/Fusion%20Client%20Downloader.exenvd
www.autodesk.com/trust/security-advisories/adsk-sa-2026-0019nvd

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000