CVE-2026-34399
Received Received - Intake

Arbitrary Code Execution in FreeCAD BIM Workbench via SVG Template

Publication date: 2026-08-17

Last updated on: 2026-08-17

Assigner: GitHub, Inc.

Description
FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, FreeCAD's BIM Workbench contains an eval() call on untrusted data from SVG template files. When a user creates a TechDraw page from a malicious SVG template, arbitrary Python code executes. The vulnerable code is in src/Mod/BIM/bimcommands/BimTDPage.py (line 87). This issue is fixed in version 1.1.1.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-17
Last Modified
2026-08-17
Generated
2026-08-18
AI Q&A
2026-08-18
EPSS Evaluated
N/A
NVD
CVE-2026-34399

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
freecad freecad to 1.1.1 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-95 The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes code syntax before using the input in a dynamic evaluation call (e.g. "eval").

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

FreeCAD versions 0.19 to 1.1.1 contain a vulnerability in the BIM Workbench where SVG template files are processed using eval() on untrusted data. This allows arbitrary Python code execution when a user creates a TechDraw page from a malicious SVG template. The issue is located in src/Mod/BIM/bimcommands/BimTDPage.py at line 87.

Impact Analysis

If exploited, this vulnerability could allow an attacker to execute arbitrary code on your system with the same privileges as the user running FreeCAD. This could lead to data theft, system compromise, or further network infiltration depending on the attacker's goals.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, which may violate GDPR (data protection) or HIPAA (health information privacy) requirements. Organizations using affected FreeCAD versions may face compliance violations if sensitive data is exposed due to exploitation.

Mitigation Strategies

Update FreeCAD to version 1.1.1 or later to fix the vulnerability. Remove any untrusted SVG template files from the BIM Workbench directory. Monitor for suspicious activity in TechDraw pages generated from templates.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-34399. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart