CVE-2026-10789 MCP Extension Code Injection Vulnerability in Autodesk Fusion Desktop
A malicious webpage can trigger arbitrary code execution in the MCP extension of Autodesk Fusion Desktop if the extension is enabled.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2026-10789?
CVE-2026-10789 is a critical code injection vulnerability in Autodesk Fusion, published on 22 Jun 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
A maliciously crafted webpage, when visited by a user with Autodesk Fusion Desktop running and the MCP extension enabled, can trigger a vulnerability in the MCP extension that could allow arbitrary code execution. A successful exploit may allow code to execute with the privileges of the current user.
Weakness: CWE-94
Which versions are affected by CVE-2026-10789?
It affects 1 product.
Products include Autodesk Fusion.
How do I fix CVE-2026-10789?
No fix has been published for CVE-2026-10789 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2026-10789 being exploited?
There is no known exploitation of CVE-2026-10789 in the wild and no public exploit code.
Other vulnerabilities in Autodesk Fusion
- CVE-2025-10244 HTML Payload Stored Cross-Site Scripting (XSS) Vulnerability
- CVE-2026-0533 Stored XSS in Fusion desktop when attempting to delete a file
- CVE-2026-0534 Stored XSS in the value of a part attribute
- CVE-2026-0535 Stored XSS in Electronic Library Component Description
- CVE-2026-4344 Stored Cross-Site Scripting (XSS) Vulnerability in Assembly Component Name
Sources
Also known as GHSA-fp83-vjxr-x824.