CVE-2026-0533 Overview
CVE-2026-0533 is a stored Cross-Site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application. The flaw resides in the delete confirmation dialog, which renders design names without proper output encoding. An attacker can embed a malicious HTML payload inside a design name. When a user opens the delete confirmation dialog and interacts with the rendered name, the payload executes in the context of the Fusion process.
Successful exploitation allows an attacker to read local files or execute arbitrary code within the privileges of the current user. The vulnerability is classified under CWE-79: Improper Neutralization of Input During Web Page Generation.
Critical Impact
Attackers can achieve arbitrary code execution and local file disclosure on systems running vulnerable Autodesk Fusion installations after a single user click in the delete confirmation dialog.
Affected Products
- Autodesk Fusion (desktop application) on Windows
- Autodesk Fusion (desktop application) on macOS
- All versions prior to the fix referenced in Autodesk Security Advisory ADSK-SA-2026-0001
Discovery Timeline
- 2026-01-22 - CVE-2026-0533 published to NVD
- 2026-01-30 - Last updated in NVD database
Technical Details for CVE-2026-0533
Vulnerability Analysis
The vulnerability is a stored XSS issue triggered through the design name field. Autodesk Fusion persists design metadata, including names, and renders that data inside the delete confirmation dialog of the desktop client. The dialog interprets HTML markup contained in the design name rather than treating it as inert text. As a result, attacker-controlled markup, including <script> tags or event handlers such as onerror and onclick, executes when the dialog is displayed and clicked.
Because Fusion's desktop client embeds a web rendering component within a native application, script execution is not confined to a browser sandbox. The injected code runs with the same privileges as the Fusion process and can invoke local APIs exposed to the renderer. This enables reading local files and arbitrary code execution in the context of the current user.
Root Cause
The root cause is missing output encoding on the design name string before injecting it into the dialog's HTML template. Untrusted input is concatenated into the DOM rather than rendered through a safe text node or escaped through HTML entity encoding. Any HTML metacharacters within the design name are parsed as markup.
Attack Vector
An attacker creates or modifies a design and sets its name to contain a malicious HTML payload. The crafted design is then shared with a target user through Autodesk's collaboration features, cloud project sharing, or any workflow that delivers external designs into the victim's Fusion environment. The victim must open the delete confirmation dialog for the design and click within it. The required user interaction is reflected in the CVSS vector as UI:R, while the attack vector remains AV:N because delivery occurs over the network.
No verified public proof-of-concept is available. Refer to the Autodesk Security Advisory ADSK-SA-2026-0001 for vendor-supplied technical details.
Detection Methods for CVE-2026-0533
Indicators of Compromise
- Autodesk Fusion design files or project entries with names containing HTML tags, JavaScript event handlers, or encoded script payloads such as <img onerror=...> or <script>.
- Unexpected child processes spawned by the Fusion client, including command interpreters such as cmd.exe, powershell.exe, or /bin/sh.
- Outbound network connections from the Fusion process to non-Autodesk domains shortly after a delete operation.
- File reads from sensitive locations (%USERPROFILE%, ~/.ssh, ~/Library/Application Support) originating from the Fusion process.
Detection Strategies
- Inspect Fusion project metadata and shared design libraries for design names containing HTML or script syntax.
- Build endpoint detection rules that flag Fusion processes launching shells, scripting hosts, or performing unexpected file reads.
- Correlate Fusion telemetry with user activity around delete confirmation dialogs to surface anomalous post-click behavior.
Monitoring Recommendations
- Monitor process trees rooted at Fusion.exe (Windows) and the Fusion application bundle (macOS) for non-standard child processes.
- Log and alert on file access patterns where the Fusion process reads credential stores, browser profiles, or SSH keys.
- Track outbound HTTP/HTTPS connections from Fusion to domains outside the Autodesk infrastructure.
How to Mitigate CVE-2026-0533
Immediate Actions Required
- Update Autodesk Fusion to the fixed version listed in Autodesk Security Advisory ADSK-SA-2026-0001.
- Reinstall the Fusion client using the official installers: Autodesk Fusion Client EXE for Windows or Autodesk Fusion Client DMG for macOS.
- Audit shared projects and team libraries for designs with suspicious names and remove or rename them before users interact with delete dialogs.
Patch Information
Autodesk has published guidance and fixed builds through Security Advisory ADSK-SA-2026-0001. Customers should follow the advisory to obtain the patched client and confirm the deployed version after upgrade. Fusion uses a streaming installer, so launching the updated client triggers retrieval of the corrected binaries.
Workarounds
- Restrict acceptance of Fusion projects and designs to trusted internal sources until patching is complete.
- Instruct users to rename suspicious incoming designs through the project browser rather than using the delete dialog.
- Run Fusion under a standard user account without administrative privileges to limit the impact of code execution within the process context.
Disclaimer: This content was generated using AI. While we strive for accuracy, please verify critical information with official sources.
