Stored Cross-site Scripting Vulnerability in Autodesk Fusion Desktop Application

CVE-2026-4344

What is CVE-2026-4344?

A vulnerability exists in the Autodesk Fusion desktop application where a crafted HTML payload, if clicked during the delete confirmation dialog, can lead to Stored Cross-site Scripting. This flaw allows an attacker to potentially read local files or execute arbitrary code within the context of the application, raising significant security concerns for users.

References