Vulnerability Details CVE-2026-10789
A maliciously crafted webpage, when visited by a user with Autodesk Fusion Desktop running and the MCP extension enabled, can trigger a vulnerability in the MCP extension that could allow arbitrary code execution. A successful exploit may allow code to execute with the privileges of the current user.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 20.5%
CVSS Severity
CVSS v3 Score 9.6