Stored Cross-site Scripting Vulnerability in Autodesk Fusion by Autodesk

CVE-2026-4369

What is CVE-2026-4369?

A maliciously crafted HTML payload can be displayed during the delete confirmation dialog in the Autodesk Fusion desktop application. If a user clicks on this payload, it can trigger a Stored Cross-site Scripting (XSS) vulnerability, allowing a malicious actor to read local files or execute arbitrary code within the current process. It is crucial for users to be aware of this risk and to apply the recommended patches from Autodesk to safeguard their systems.

References