Vulnerabilities & PatchesEmerging1 src
CVE-2026-34399 - FreeCAD: Arbitrary Code Execution via eval() on untrusted SVG template scale field in BIM TechDraw Page
CVE ID : CVE-2026-34399
Published : Aug. 17, 2026, 8:50 p. m.
• 17 minutes ago
Description : FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0. 19 until 1. 1. 1, FreeCAD's BIM Workbench contains an eval() call on untrusted data from SVG template files. When a user creates a TechDraw page from a malicious SVG template, arbitrary Python code executes. The vulnerable code is in src/Mod/BIM/bimcommands/BimTDPage. py (line 87). This issue is fixed in version 1. 1. 1.
Severity: 0.0
• NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...