Autodesk Fusion
CVE-2026-0533
HIGH
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessAttacker gains design-sharing access to victim's Fusion workspace
-
DeliveryCreate design with HTML/JS payload in name
-
ExploitShare or place design in victim-visible project
-
ExecutionVictim opens delete confirmation dialog
-
PersistVictim clicks, payload executes in Fusion process
-
ImpactRead local files or run arbitrary code as user
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A05:2025 - Injection
ASVS 5.0
V1 - Encoding and Sanitization Output encoding, context-aware escaping
MITRE ATT&CK
2 techniques across 2 tactics: Initial Access, Execution The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Exploitation requires (1) the attacker to control the name of a Fusion design that the victim can see - typically via Fusion's cloud project/team sharing or hub collaboration features - and (2) the victim to specifically invoke the delete confirmation dialog on that design and click within it, per CVSS UI:R. Limiting factors: the payload only fires in the delete-confirm UI flow (not on simple browse, open, or preview), no elevated privileges are needed on the victim host (PR:N) but the attacker needs a shared-design path to reach the victim, and the impact is bounded to the rights of the local Fusion process user. Default Fusion installations on macOS and Windows are in scope; no special non-default configuration is required on the victim side. |
| Impact | The CVSS 3.1 vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N yields 8.1 (High): network reachable, low complexity, no privileges, but user interaction is required (the victim must open and click within the delete dialog), with high confidentiality and integrity impact and no availability impact. Counterbalancing signals lower the practical priority: EPSS is only 0.04% (11th percentile), there is no CISA KEV listing, and no public POC is identified, so this is best read as a real but currently theoretical risk that depends entirely on social-engineering a user into deleting an attacker-supplied design. The CVSS AV:N rating is plausible because Fusion designs are shared via Autodesk cloud collaboration, but defenders should note the network vector is mediated by the design-sharing workflow rather than direct service exposure - worth verifying against the vendor advisory before treating it as a remote service flaw. |
| Exploit ScenarioDerived | An attacker creates or renames a Fusion design so its name contains an HTML/JavaScript payload, then shares it (or causes it to appear) in a project, team hub, or collaborator workspace reachable by the victim. When the victim later right-clicks the design and opens the delete confirmation dialog, the malicious name is rendered as live HTML; clicking through fires the script in the Fusion process, enabling local file theft (e.g., SSH keys, project files) or arbitrary code execution as the user. No public exploit identified at time of analysis, but the technique is straightforward once the injection sink is known. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv3 – Jun 03, 2026
Stored cross-site scripting in the Autodesk Fusion desktop application allows remote attackers to embed a malicious HTML payload in a design name that executes when a user opens the delete confirmation dialog and clicks the rendered content. Successful exploitation can lead to local file disclosure or arbitrary code execution in the context of the Fusion process. No public exploit identified at time of analysis, and EPSS exploitation probability is low (0.04%, 11th percentile).
Earlier versions of this analysis (2)
Stored cross-site scripting in the Autodesk Fusion desktop application allows a remote attacker to embed malicious HTML in a design name that executes when a victim opens the delete confirmation dialog and clicks within it. Because the rendering context is the desktop client (not a sandboxed browser), successful exploitation can read local files or achieve arbitrary code execution as the current user. No public exploit identified at time of analysis; EPSS is very low (0.04%) and the issue is not in CISA KEV.
A maliciously crafted HTML payload in a design name, when displayed during the delete confirmation dialog and clicked by a user, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application. [CVSS 7.1 HIGH]
RemediationAI
Patch available per vendor advisory: update the Autodesk Fusion desktop client to the fixed build referenced in ADSK-SA-2026-0001 (https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0001) using the official downloaders for macOS (Fusion Client Downloader.dmg) and Windows (Fusion Client Downloader.exe). Because the trigger is a delete confirmation dialog on a design name, an interim compensating control is to instruct users not to delete designs that originated from untrusted collaborators or shared team hubs and to rename suspicious designs through the project tree before invoking the delete action - note this is procedural and does not remove the underlying rendering flaw. Where feasible, restrict design sharing into Fusion Teams/Hubs to vetted accounts and remove untrusted external collaborators until all endpoints are confirmed patched, accepting the collaboration friction this introduces.
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The flaw is a CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) issue in the Autodesk Fusion desktop client (cpe:2.3:a:autodesk:fusion:*). Fusion is a hybrid desktop/cloud CAD/CAM/CAE platform that renders UI elements such as dialogs using an embedded web/Chromium-style rendering layer, meaning HTML supplied as a design name is interpreted rather than escaped when shown in the delete confirmation dialog. Because the rendering context is the desktop process itself rather than a sandboxed browser tab, injected script can reach beyond the DOM to read local files and invoke native code paths, escalating a classic stored XSS into an RCE-grade primitive.
Know when Fusion gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
3DescriptionCVE.org
A maliciously crafted HTML payload in a design name, when displayed during the delete confirmation dialog and clicked by a user, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the context of the current process.
Executive ViewAI
Autodesk Fusion contains a stored cross-site scripting vulnerability that allows attackers to embed malicious content in design file names, potentially enabling unauthorized file access or code execution when users open compromised designs. Organizations employing Fusion for collaborative design workflows face risks to data confidentiality and system integrity. Current public exploitation remains unlikely, but the high severity rating necessitates timely remediation.
Apply vendor patch.
Threat Intelligence Overview
NVD
CVE.org
EPSS
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Cross-Site Scripting occurs when an application accepts untrusted data and sends it to a web browser without proper validation or encoding.
Remote Code Execution represents the critical moment when an attacker successfully runs arbitrary code on a target system without physical access.
Affected Products (CPE)CVE.org
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of
Untrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware Tools 10.0.5 in VMware ESXi 5.0 t
VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability via HGFS out-of-bounds read, allowi
The drag-and-drop (DnD) function in VMware Workstation 12.x before version 12.5.4 and Fusion 8.x before version 8.5.5 ha
VMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1) and Horizon Client for
VMware ESXi (ESXi 6.5 without patch ESXi650-201707101-SG), Workstation (12.x before 12.5.7) and Fusion (8.x before 8.5.8
The Virtual Machine Communication Interface (VMCI) implementation in vmci.sys in VMware Workstation 8.x before 8.0.5 and
Unrestricted file upload vulnerability in the fusion_options function in functions.php in the Fusion theme 3.1 for Wordp
Untrusted search path vulnerability in VMware Tools in VMware Workstation before 8.0.4, VMware Player before 4.0.4, VMwa
VMware ESXi (6.5 before ESXi650-201710401-BG), Workstation (12.x before 12.5.8), and Fusion (8.x before 8.5.9) contain a
VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi
VMware ESXi (6.0 before ESXi600-201711101-SG, 5.5 ESXi550-201709101-SG), Workstation (12.x before 12.5.8), and Fusion (8
GitHub PoC
Exploit-DB