---
id: CVE-2026-113775
title: Dynamic Library Loading Process Control in Autodesk Fusion Desktop
summary: >-
  A maliciously crafted dynamic library, when loaded from an arbitrary path
  through the TextCommands.LoadDll command exposed by the Autodesk Fusion API,
  can trigger an Exposed Dangerous Function vulnerability in the Autodesk Fusion
  desktop…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-749
vendor: Autodesk
product: Fusion
affected:
  - Fusion >= 2705.1.30 < 2706.1.14
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-29T03:56:39.319079Z'
published: '2026-10-27'
updated: '2026-10-29'
sourceUpdated: '2026-10-29T10:45:46.129Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-113775'
references:
  - url: 'https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0019'
  - url: >-
      https://dl.appstreaming.autodesk.com/production/installers/Fusion%20Client%20Downloader.exe
  - url: >-
      https://dl.appstreaming.autodesk.com/production/installers/Fusion%20Client%20Downloader.dmg
tags:
  - cve.org
epss: 0.00168
epssPercentile: 0.0615
ingestedAt: '2026-10-27T16:32:34.411Z'
---

## Overview

A maliciously crafted dynamic library, when loaded from an arbitrary path through the TextCommands.LoadDll command exposed by the Autodesk Fusion API, can trigger an Exposed Dangerous Function vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to execute arbitrary code in the context of the current process.

## Affected

- `Fusion >= 2705.1.30 < 2706.1.14`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.