{"id":"CVE-2026-113775","kind":"vulnerability","aliases":["CVE-2026-113775"],"related":[],"title":"Autodesk Fusion: crafted DLL loaded via TextCommands.LoadDll runs code","description":"A maliciously crafted dynamic library, when loaded from an arbitrary path through the TextCommands.LoadDll command exposed by the Autodesk Fusion API, can trigger an Exposed Dangerous Function vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to execute arbitrary code in the context of the current process.","summary":"The Autodesk Fusion desktop application exposes a TextCommands.LoadDll command through its API that loads a dynamic library from an arbitrary path without restriction. A malicious actor who supplies a crafted library can execute arbitrary code in the context of the running Fusion process.","severity":"high","cvss":7.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["autodesk-fusion","other","windows"],"not_affected_if":[],"how_to_check":"- unknown","fix":"- unknown","status":"open","published_at":"2026-10-27T17:16:58+00:00","first_seen_at":"2026-10-27T17:32:45+00:00","triaged_at":"2026-10-27T17:34:30+00:00","updated_at":"2026-10-27T17:34:30+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-10-27T17:34:30Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"local","title":"Autodesk Fusion: crafted DLL loaded via TextCommands.LoadDll runs code","impact":"high","summary":"The Autodesk Fusion desktop application exposes a TextCommands.LoadDll command through its API that loads a dynamic library from an arbitrary path without restriction. A malicious actor who supplies a crafted library can execute arbitrary code in the context of the running Fusion process.","category":"other","nicknames":[],"who_cares":["autodesk-fusion","windows"],"confidence":0.6,"needs_auth":"unknown","worst_case":"Arbitrary code runs inside the Fusion process on the user's machine","analyst_note":"Check the Autodesk security bulletin for affected Fusion versions, the fixed build, and whether the API is reachable without a local user action.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000522,"input_tokens":3346,"output_tokens":374,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-113775':12A,15A '-2026':11A,14A 'actor':46B,100C 'api':32B,84C 'applic':25B,97C 'arbitrari':40B,54B,73C,107C 'autodesk':1A,17B,22B,82C,94C 'autodesk-fus':16B 'code':9A,55B,108C 'command':29B,78C 'context':58B,111C 'craft':3A,50B,66C 'current':114C 'cve':10A,13A 'danger':89C 'desktop':24B,96C 'dll':4A 'dynam':36B,67C 'execut':53B,106C 'expos':26B,79C,88C 'function':90C 'fusion':2A,18B,23B,62B,83C,95C 'leverag':102C 'librari':37B,51B,68C 'load':5A,34B,70C 'malici':45B,65C,99C 'may':101C 'path':41B,74C 'process':63B,115C 'restrict':43B 'run':8A,61B 'suppli':48B 'textcommands.loaddll':7A,28B,77C 'trigger':86C 'via':6A 'vulner':91C,104C 'window':20B 'without':42B","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T17:16:58+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"psirt@autodesk.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-113775","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113775","severity":null,"published_at":"2026-10-27T17:16:58+00:00","modified_at":"2026-10-27T17:16:58+00:00","first_seen_at":"2026-10-27T17:32:45+00:00","fetched_at":"2026-10-27T17:32:45+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}