CVE-2026-1289 PDF File Parsing Vulnerabilities in Certain Autodesk Desktop Products
Attackers can execute arbitrary code, read sensitive data, or cause crashes by tricking users into opening malicious PDF files in Autodesk desktop applications.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2026-1289?
CVE-2026-1289 is a high-severity use after free vulnerability in Autodesk AutoCAD, published on 6 Aug 2026. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
A maliciously crafted PDF file, when parsed through Autodesk Revit, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, disclose sensitive data, or execute arbitrary code in the context of the current process.
Weakness: CWE-416
Which versions are affected by CVE-2026-1289?
It affects 1 product.
Products include Autodesk Revit.
How do I fix CVE-2026-1289?
No fix has been published for CVE-2026-1289 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2026-1289 being exploited?
There is no known exploitation of CVE-2026-1289 in the wild and no public exploit code.
Other vulnerabilities in Autodesk AutoCAD
- CVE-2026-11803 PDF File Parsing Vulnerabilities in Certain Autodesk Desktop Products
- CVE-2026-8325 PDF File Parsing Vulnerabilities in Certain Autodesk Desktop Products
- CVE-2025-8354 RFA File Parsing Type Confusion Vulnerability
- CVE-2025-5042 RFA File Parsing Out-of-Bounds Read Vulnerability
- CVE-2025-5037 RFA File Parsing Memory Corruption Vulnerability
Sources
Also known as GHSA-37hm-v5j4-vc79.