Security Advisory

CVE-2026-10789

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-22 17:15:25
Last updated 2026-06-23 03:56:02
Assigner autodesk
CVSS score 9.6
State PUBLISHED

Description

A maliciously crafted webpage, when visited by a user with Autodesk Fusion Desktop running and the MCP extension enabled, can trigger a vulnerability in the MCP extension that could allow arbitrary code execution. A successful exploit may allow code to execute with the privileges of the current user.