PT-2026-6017 · Autodesk · Autodesk 3Ds Max

Published 2026-02-04 · Updated 2026-02-04 · CVE-2026-0662

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Autodesk 3ds Max (affected versions not specified)

Description A specially designed project directory, when used to open a max file in Autodesk 3ds Max, may allow for the execution of arbitrary code with the privileges of the current process. This is due to the use of an untrusted search path.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Untrusted Search Path

Weakness Enumeration

CWE-426

Related Identifiers

CVE-2026-0662

Affected Products

Autodesk 3Ds Max

References · 5

• https://osv.dev/vulnerability/CVE-2026-0662 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-0662 · Security Note
• https://autodesk.com/trust/security-advisories/adsk-sa-2026-0002 · Vendor Advisory
• https://autodesk.com/products/autodesk-access/overview · Patch
• https://t.me/CVEtracker/43744 · Telegram Post