PT-2026-76780 · Freecad · Freecad

CVE-2026-34399

·

Published

2026-08-17

·

Updated

2026-08-19

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions FreeCAD versions 0.19 through 1.1.0
Description The BIM Workbench contains an eval() call that processes untrusted data from SVG template files. If a user creates a TechDraw page using a malicious SVG template, arbitrary Python code can be executed. The issue is located in the src/Mod/BIM/bimcommands/BimTDPage.py file.
Recommendations Update to version 1.1.1.

Exploit

Fix

Eval Injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-95

Related Identifiers

CVE-2026-34399
GHSA-CHV4-VM6R-WJQJ

Affected Products

Freecad