Stored Cross-site Scripting Vulnerability in Autodesk Fusion Desktop Application

CVE-2026-0534

What is CVE-2026-0534?

A vulnerability exists in the Autodesk Fusion desktop application that allows attackers to exploit a Stored Cross-site Scripting (XSS) flaw. This issue arises when a user interacts with a maliciously crafted HTML payload stored in a part's attribute. If triggered, this could allow unauthorized access to local files or enable the execution of arbitrary code within the current process context. Users are encouraged to apply the latest patches to secure their systems.

References