CVE-2026-10789
CRITICAL
NVD
CVSS Score
9.6
Severity
CRITICAL
Published
Jun 22, 2026
Vendor
unknown
Description
A maliciously crafted webpage, when visited by a user with Autodesk Fusion Desktop running and the MCP extension enabled, can trigger a vulnerability in the MCP extension that could allow arbitrary code execution. A successful exploit may allow code to execute with the privileges of the current user.