CVE-2026-73233

Received Received - Intake

Code Injection in FreeCAD FEM Displacement Constraint

Publication date: 2026-08-11

Last updated on: 2026-08-11

Assigner: GitHub, Inc.

Description

FreeCAD is a free and open-source multiplatform 3D parametric modeler. Prior to 1.1.2, the FEM Displacement Constraint task dialog in src/Mod/Fem/Gui/TaskFemConstraintDisplacement.cpp passes the xDisplacementFormula, yDisplacementFormula, and zDisplacementFormula fields of a Fem::ConstraintDisplacement object through TaskDlgFemConstraintDisplacement::accept() into Gui::Command::doCommand. The escaping helper neutralizes quotation marks but not backslashes, allowing crafted formula text to terminate the generated Python string and execute arbitrary Python code with the FreeCAD process's privileges when a victim accepts the dialog. This issue is fixed in version 1.1.2.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-08-11

Generated

2026-09-01

AI Q&A

2026-08-12

EPSS Evaluated

2026-08-30

NVD

CVE-2026-73233

EUVD

EUVD-2026-56931

Affected Vendors & Products

Vendor	Product	Version / Range
freecad	freecad	to 1.1.2 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-94	The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Attack-Flow Graph

Executive Summary

This vulnerability in FreeCAD versions before 1.1.2 allows arbitrary Python code execution through the FEM Displacement Constraint task dialog. Attackers can inject malicious code into formula fields (xDisplacementFormula, yDisplacementFormula, zDisplacementFormula) because the escape helper only neutralizes quotation marks but not backslashes. This lets crafted input terminate the Python string and execute arbitrary commands with FreeCAD's privileges when a user accepts the dialog.

Detection Guidance

This vulnerability affects FreeCAD versions 1.1.1 and earlier. To detect it, check the FreeCAD version installed on your system. If you are running version 1.1.1 or below, your system is vulnerable. Use the command 'freecad --version' to check the installed version.

Impact Analysis

If you use FreeCAD versions 1.1.1 or earlier, an attacker could trick you into opening a malicious file or dialog that executes arbitrary code on your system with the same permissions as FreeCAD. This could allow unauthorized access to files, installation of malware, or other malicious activities depending on your system's configuration.

Compliance Impact

This vulnerability could lead to unauthorized code execution, potentially violating data integrity and confidentiality requirements in GDPR and HIPAA. If exploited, it may result in unauthorized access to personal or health data, triggering compliance breaches and legal consequences for affected organizations.

Mitigation Strategies

Upgrade FreeCAD to version 1.1.2 or later immediately. This version patches the vulnerability by switching to direct C++ text handling for displacement formulas, removing the code injection risk. Download the latest version from the official FreeCAD website or your package manager.

Hi! I’m here to help you understand CVE-2026-73233. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70