CVE-2026-34398

Published: Aug 17, 2026Modified: Aug 19, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: security-advisories@github.com (Secondary)

Description

FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, src/Mod/BIM/bimcommands/BimProjectManager.py in the BIM Project Manager Load Template flow passes attacker-controlled FCStd Meta property values for wpposition, wpu, wpv, and wpaxis directly to eval(), allowing arbitrary Python code execution when a user loads a malicious BIM project template. This issue is fixed in version 1.1.1.

Related CWEs

Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')

The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes code syntax before using the input in a dynamic evaluation call (e.g. "eval").

References (6)

https://github.com/FreeCAD/FreeCAD/commit/871ee19b76224910332bbfbd39eebbede967998b

Source: security-advisories@github.com

https://github.com/FreeCAD/FreeCAD/commit/9ed351cc4700db0a94c46f020c34c58bbf1bdaba

Source: security-advisories@github.com

https://github.com/FreeCAD/FreeCAD/pull/28610

Source: security-advisories@github.com

https://github.com/FreeCAD/FreeCAD/releases/tag/1.1.1

Source: security-advisories@github.com

https://github.com/FreeCAD/FreeCAD/security/advisories/GHSA-8rfj-7956-6gwf

Source: security-advisories@github.com

https://github.com/FreeCAD/FreeCAD/security/advisories/GHSA-8rfj-7956-6gwf

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Timeline

No history available yet.