Skip to content
OpenAdvisories
High · 8.8 CVE-2026-107672 EUVD-2026-111142GHSA-x2ww-vrx6-xvhh

Stack File Trusted Markdown Injection in Autodesk Fusion Post Processor Utility

Published Oct 27, 2026 · Updated Oct 29, 2026 · Assigned by autodesk

Description

A maliciously crafted .stack.json file can trigger a trusted Markdown injection vulnerability in Autodesk Fusion Post Processor Utility Extension. A malicious actor may exploit this vulnerability to execute arbitrary commands in the context of the current user.

Affected products

VendorProductAffectedFixed
Autodesk Fusion Post Processor Utility 5.0.1 – < 5.0.2 5.0.2

References