Technical impact
The vulnerability arises when a maliciously crafted RFA file is converted to FormIt in Autodesk Revit. The file parsing routine can trigger a NULL Pointer Dereference, causing the application to crash. This results in a denial-of-service condition for any user attempting the conversion operation and can disrupt workflows in shared or production environments.
Affected Systems
Autodesk Revit versions 2024.3.5, 2025.4.5, 2026.4.1, and 2027.1 are susceptible. The issue manifests in the Convert RFA to FormIt feature across these releases.
Risk and Exploitability
The CVSS score of 5.5 reflects moderate severity, while the EPSS score of less than 1% indicates low likelihood of exploitation at present. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires an attacker to supply a specially crafted RFA file to a user with access to Revit; the attack vector is local or remote file upload, inferred from the workflow context. Successful exploitation would merely crash the application, yielding a denial-of-service rather than code execution or data compromise.
