Skip to content
OpenAdvisories
High · 7.8 CVE-2026-14478 EUVD-2026-57238GHSA-m4rg-6628-ff5c

Incorrect Permission Assignment in Autodesk Installer Named Pipes

Published Aug 12, 2026 · Updated Aug 13, 2026 · Assigned by autodesk

Description

A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confidentiality, integrity, and availability.

Affected products

VendorProductAffectedFixed
Autodesk Installer 2.22.0 – < 2.23.0 2.23.0

References