CVE-2026-14478Incorrect Permission Assignment in Autodesk Installer Named Pipes

Descripción

A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confidentiality, integrity, and availability.

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Referencias y parches

• https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0013 vendor-advisoryVendor Advisory
• https://emsfs.autodesk.com/utility/odis/1/installer/latest/AdODIS-installer.exe patchProduct