Autodesk Revit Out-of-Bounds Read Vulnerability Allowing Code Execution

An out-of-bounds read vulnerability has been identified in Autodesk Revit 2026. When a maliciously crafted RFA file is parsed by the application, it can lead to a crash, unauthorized reading of sensitive data, or execution of arbitrary code within the current process context.

Impact

Exploitation of this vulnerability can cause application crashes, unauthorized access to sensitive information, or allow execution of arbitrary code in the context of the user running Revit.

Remediation

Users are advised to update to Autodesk Revit 2026.2, available through Autodesk Access or the Accounts Portal.