This vulnerability (CVE-2026-85217) involves an external control of system or configuration setting (CWE-15) in Autodesk Fusion Desktop. A maliciously crafted add-in, once installed and executed, can alter persistent network proxy settings without notifying or obtaining consent from the user. This manipulation can redirect authenticated Fusion network traffic through an attacker-controlled proxy, risking exposure of sensitive information associated with the current user session. The vulnerability has a CVSS v3.1 score of 8.6, indicating high severity. It specifically affects Autodesk Fusion version 2705.0.0. No patch or official remediation level has been provided by Autodesk as of the published date.

Successful exploitation allows an attacker to redirect authenticated network traffic through a proxy they control, potentially exposing sensitive information of the current user. This can lead to confidentiality, integrity, and availability impacts as indicated by the CVSS vector (C:H/I:H/A:H).

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when installing add-ins from untrusted sources and monitor for suspicious network proxy changes.