CVE-2026-107672: Stack File Trusted Markdown Injection in Autodesk Fusion Post Processor Utility
Published Oct 27, 2026
·Updated
A maliciously crafted .stack.json file can trigger a trusted Markdown injection vulnerability in Autodesk Fusion Post Processor Utility Extension. A malicious actor may exploit this vulnerability to execute arbitrary commands in the context of the current user.
Affected Software
1 affected component
Autodesk Fusion Post Processor Utility Extension
Event History
Oct 27, 2026
CVE Published
via MITRE·04:04 PM
Data Sourced
via MITRE·04:04 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does exploitation require the attacker to have an account or other privileges in the target environment?
No privileges are required (PR:N). The attack vector is network-based and has low attack complexity, but it requires user interaction (UI:R).
2
What level of access could an attacker gain after successful exploitation?
The attacker may execute arbitrary commands in the context of the current user. The listed impact includes high confidentiality, integrity, and availability effects.