Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-14478

Incorrect Permission Assignment in Autodesk Installer Named Pipes

Description

A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confidentiality, integrity, and availability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Autodesk Installer

Default version status: unaffected

  • 2.22.0 to < 2.23.0affected

References