Autodesk Revit is vulnerable to a memory corruption flaw that can lead to arbitrary code execution, posing a significant risk to workstations that open untrusted design files.

This is a buffer copy without checking size of input vulnerability (CWE-120). An attacker can trigger this by providing a specially crafted RFA, RTE, or RVT file to a user, which results in memory corruption and arbitrary code execution in the context of the current user process.

The vulnerability carries a CVSS score of 7.8, indicating a high severity risk. Successful exploitation could allow an attacker to gain full control over the user session, potentially leading to unauthorized data access, intellectual property theft, or the installation of persistent malware on engineering workstations.

Immediate Action: Update Autodesk Revit to the latest available version (2026.2, 2025.4.2, 2024.3.3, or 2023.1.8) as specified in the official Autodesk security advisory.

Proactive Monitoring: Monitor file access logs and endpoint detection systems for unusual process execution patterns originating from the Revit application.

Compensating Controls: Implement strict email and file transfer filtering policies to block untrusted or unexpected RFA, RTE, and RVT files from external sources.

Public Exploit Available: Unknown

Given the high impact of arbitrary code execution, security teams should prioritize patching all affected Revit installations immediately. Since this vulnerability is triggered by parsing files, users should be instructed to exercise caution when opening design files from unverified or external sources until updates are fully deployed across the environment.