CVE-2026-34789highCWE-94

CVE-2026-34789: falha de alta gravidade em FreeCAD

FreeCAD: Arbitrary code execution via unsandboxed PyImport_ImportModule in PropertyPythonObject::Restore

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar FreeCAD+ Monitorar freecad

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7epss 0.2%
FreeCAD is a free and open-source multiplatform 3D parametric modeler. Prior to 1.1.2, src/App/PropertyPythonObject.cpp in PropertyPythonObject::Restore() passes the attacker-controlled module attribute from serialized PropertyPythonObject XML directly to PyImport_ImportModule() while restoring a crafted FCStd document, which executes module-level Python code, and the legacy pickle branch also imports an attacker-controlled module and invokes its class constructor through PyObject_CallObject(). This issue is fixed in version 1.1.2.
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Produtos afetados
FreeCAD · FreeCAD
CVEs relacionadas — FreeCAD

No mesmo produto, das mais perigosas para as menos.

CVE-2026-73234HIGHFreeCAD: FCStd path traversal allows arbitrary file write via unsanitized file attribute in PropertyFileIncluded::Restore()EPSS 0.2%CVE-2026-34398HIGHFreeCAD: Arbitrary Code Execution via eval() on untrusted project file metadata in BIM WorkbenchEPSS 0.2%CVE-2026-73233HIGHFreeCAD: FEM formula incomplete escapeEPSS 0.2%CVE-2026-34399HIGHFreeCAD: Arbitrary Code Execution via eval() on untrusted SVG template scale field in BIM TechDraw PageEPSS 0.2%CVE-2026-73235MEDIUMFreeCAD: XXE file read and SSRF via external entity injection in Document.xml SAX parserEPSS 0.1%