EUVD-2026-60457Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
File-borne local delivery and mandatory user interaction are the only constraints; no target privileges needed; arbitrary code execution yields complete CIA impact.
Primary rating from Vendor (GitHub_M).
CVSS VectorVendor: GitHub_M
Lifecycle Timeline
4DescriptionCVE.org
FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, src/Mod/BIM/bimcommands/BimProjectManager.py in the BIM Project Manager Load Template flow passes attacker-controlled FCStd Meta property values for wpposition, wpu, wpv, and wpaxis directly to eval(), allowing arbitrary Python code execution when a user loads a malicious BIM project template. This issue is fixed in version 1.1.1.
Articles & Coverage 1
AnalysisAI
Arbitrary Python code execution in FreeCAD's BIM module (versions 0.19 through pre-1.1.1) is triggered when a user opens a malicious project template file through the BIM Project Manager's Load Template function. The loadTemplate() method in BimProjectManager.py passes FCStd metadata fields (wpposition, wpu, wpv, wpaxis) directly to Python's built-in eval(), enabling an attacker who can deliver a crafted template to achieve full code execution under the victim's user account. No public exploit has been identified at time of analysis; the vendor-released patch is confirmed in version 1.1.1.
Technical ContextAI
FreeCAD uses FCStd files (ZIP archives containing XML metadata) as its project format. The BIM module's BimProjectManager.py reads working plane properties from template metadata and passes them directly to Python's built-in eval() - a textbook CWE-95 (Improper Neutralization of Directives in Dynamically Evaluated Code / Eval Injection) pattern. The fix in PR #28610 introduces a purpose-built _parse_vector() function using strict regex matching (r'^\s*Vector\s*\(\s*([^,]+)\s*,\s*([^,]+)\s*,\s*([^,)]+)\s*\)\s*$') to extract only numeric Vector(x,y,z) components, eliminating arbitrary code paths. The same patch batch also remediated related eval() misuse in BimLayers.py (replaced with ast.literal_eval() for color data), BimTDPage.py (arithmetic scale parsing), and exportIFC.py (boolean string comparison). Affected CPE: cpe:2.3:a:freecad:freecad:*:*:*:*:*:*:*:* covering versions 0.19 through 1.1.0 across all supported platforms.
RemediationAI
Upgrade to FreeCAD 1.1.1, the confirmed patched release available at https://github.com/FreeCAD/FreeCAD/releases/tag/1.1.1. The fix replaces all unsafe eval() calls in the BIM module with safe alternatives: a regex-validated _parse_vector() function for working plane vector fields (commits 871ee19b76224910332bbfbd39eebbede967998b and 9ed351cc4700db0a94c46f020c34c58bbf1bdaba), ast.literal_eval() for color tuples in BimLayers.py, explicit arithmetic parsing in BimTDPage.py, and direct string comparison for booleans in exportIFC.py. If immediate upgrade is not feasible, the primary compensating control is to treat FCStd BIM template files from external or untrusted sources with the same caution as executable attachments - verify file origin and integrity before loading. There is no known configuration option to disable only the vulnerable loadTemplate() code path without disabling the BIM module entirely, which would eliminate BIM Project Manager functionality. Organizations sharing templates across teams should establish a verified-source policy for template distribution.
Wazuh SIEM platform versions 4.4.0 through 4.9.0 contain an unsafe deserialization vulnerability in the DistributedAPI t
BentoML version 1.4.2 and earlier contains an unauthenticated remote code execution vulnerability through insecure deser
pgAdmin 4 contains critical remote code execution vulnerabilities in the Query Tool download and Cloud Deployment endpoi
The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python
BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Rated critica
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCiph
pyLoad download manager version prior to 0.5.0b3.dev77 exposes the Flask SECRET_KEY through an unauthenticated endpoint.
Langflow (a visual LLM pipeline builder) contains a critical unauthenticated code execution vulnerability (CVE-2026-3301
In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and conse
Unauthenticated remote code execution affects Kestra OSS (the open-source event-driven orchestration platform) prior to
Unauthenticated remote code execution in Marimo ≤0.20.4 allows attackers to execute arbitrary system commands via the `/
pyLoad is the free and open-source Download Manager written in pure Python. Rated medium severity (CVSS 5.3), this vulne
Same weakness CWE-95 – Eval Injection
View allVendor StatusVendor
Share
External POC / Exploit Code
Leaving vuln.today