If you learned from my posts, inspired, or encouraged to grow in the cybersecurity and digital forensics, I would really appreciate your vote and support - Husam Shbib!
MyCyberNews
← Back to feed
Vulnerabilities & PatchesEmerging1 sourceAug 17, 2026 · 20:50via CVEFeed

CVE-2026-34399 - FreeCAD: Arbitrary Code Execution via eval() on untrusted SVG template scale field in BIM TechDraw Page

Brief

CVE ID : CVE-2026-34399

Published : Aug. 17, 2026, 8:50 p. m.

  • 17 minutes ago

Description : FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0. 19 until 1.

  • 1, FreeCAD's BIM Workbench contains an eval() call on untrusted data from SVG template files. When a user creates a TechDraw page from a malicious SVG template, arbitrary Python code executes. The vulnerable code is in src/Mod/BIM/bimcommands/BimTDPage. py (line 87). This issue is fixed in version 1.
  • 1.

Severity: 0.0

  • NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Read more on CVEFeed→
Vulnerabilities & PatchesCVE-2026-34399