CVE-2026-34398

Received Received - Intake

Arbitrary Code Execution in FreeCAD BIM Project Manager

Publication date: 2026-08-17

Last updated on: 2026-08-17

Assigner: GitHub, Inc.

Description

FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, src/Mod/BIM/bimcommands/BimProjectManager.py in the BIM Project Manager Load Template flow passes attacker-controlled FCStd Meta property values for wpposition, wpu, wpv, and wpaxis directly to eval(), allowing arbitrary Python code execution when a user loads a malicious BIM project template. This issue is fixed in version 1.1.1.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-17

Last Modified

2026-08-17

Generated

2026-08-18

AI Q&A

2026-08-18

EPSS Evaluated

N/A

NVD

CVE-2026-34398

Affected Vendors & Products

Vendor	Product	Version / Range
freecad	freecad	1.1.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-95	The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes code syntax before using the input in a dynamic evaluation call (e.g. "eval").

Attack-Flow Graph

Executive Summary

This vulnerability in FreeCAD (versions 0.19 to 1.1.1) involves the BIM Project Manager Load Template feature. Attackers can exploit it by injecting malicious values into specific Meta properties (wpposition, wpu, wpv, wpaxis) which are then executed via Python's eval() function. This allows arbitrary code execution when a user opens a crafted BIM project template.

Impact Analysis

If you use FreeCAD versions between 0.19 and 1.1.1, opening a malicious BIM project template could allow an attacker to execute arbitrary code on your system. This could lead to data theft, system compromise, or further network infiltration depending on your environment.

Compliance Impact

This vulnerability could lead to unauthorized code execution, potentially causing data breaches or unauthorized access to sensitive information. This may violate GDPR's data protection requirements or HIPAA's security rules, depending on the data processed by FreeCAD in your environment.

Mitigation Strategies

Update FreeCAD to version 1.1.1 or later to fix the arbitrary code execution vulnerability in the BIM Project Manager.

Hi! I’m here to help you understand CVE-2026-34398. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70