PT-2026-70894 · Freecad · Freecad
CVE-2026-73233
·
Published
2026-08-11
·
Updated
2026-08-11
CVSS v4.0
8.5
High
| Vector | AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Name of the Vulnerable Software and Affected Versions
FreeCAD versions prior to 1.1.2
Description
The FEM Displacement Constraint task dialog in src/Mod/Fem/Gui/TaskFemConstraintDisplacement.cpp fails to properly sanitize input. Specifically, the
TaskDlgFemConstraintDisplacement::accept() function passes the xDisplacementFormula, yDisplacementFormula, and zDisplacementFormula fields of a Fem::ConstraintDisplacement object into Gui::Command::doCommand. Because the escaping helper does not neutralize backslashes, a crafted formula can terminate the generated Python string, leading to arbitrary Python code execution with the privileges of the FreeCAD process when the dialog is accepted.Recommendations
Update to version 1.1.2.
Exploit
Fix
Code Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Freecad