CVE-2026-107672
CVE-2026-107672 · Stack File Trusted Markdown Injection in Autodesk Fusion Post Processor Utility
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A maliciously crafted .stack.json file can trigger a trusted Markdown injection vulnerability in Autodesk Fusion Post Processor Utility Extension. A malicious actor may exploit this vulnerability to execute arbitrary commands in the context of the current user.
CVSS 8.8 · High · EPSS 0.3% · Fix available
- Published
- Updated
Affected products and versions
fusion post processor utility
- Versions
- ≥ 5.0.1, < 5.0.2: Affected (semver)
Update to 5.0.2