Autodesk AutoCAD CATPART Parsing Flaw (CVE‑2026‑0874) Enables Remote Code Execution

LiveThreat Vulnerability Brief — CVE-2026-0874

What It Is — Autodesk AutoCAD contains an out‑of‑bounds write flaw in its CATPART file parser that can be triggered by a crafted CATPART file. Successful exploitation allows an attacker to execute arbitrary code in the context of the AutoCAD process. Exploitability — Remote code execution is possible but requires user interaction (opening a malicious file or visiting a page that forces a download). A proof‑of‑concept has been published; CVSS 7.8 (High).

Affected Products — Autodesk AutoCAD (all versions prior to the February 2026 security update).

TPRM Impact — Design files are often exchanged across engineering partners, contractors, and SaaS platforms. A compromised AutoCAD instance can be leveraged to inject malicious code into downstream systems, jeopardizing intellectual property and exposing supply‑chain participants to further compromise.

Recommended Actions —

1. Deploy Autodesk’s February 2026 security update (ADSK‑SA‑2026‑0004) immediately.
2. Enforce strict file‑type controls: block or sandbox CATPART files from untrusted sources.
3. Update DLP and content‑inspection policies to flag anomalous CATPART payloads.
4. Monitor endpoint telemetry for unexpected AutoCAD process behavior or code injection alerts.

Source: Zero Day Initiative Advisory ZDI‑26‑106