FreeCAD up to 1.1.1 FEM Displacement Constraint Task Dialog TaskFemConstraintDisplacement.cpp accept neutralization

Summaryinfo

A vulnerability was found in FreeCAD up to 1.1.1 and classified as critical. This issue affects the function TaskDlgFemConstraintDisplacement::accept of the file src/Mod/Fem/Gui/TaskFemConstraintDisplacement.cpp of the component FEM Displacement Constraint Task Dialog. Executing a manipulation of the argument xDisplacementFormula/yDisplacementFormula/zDisplacementFormula can lead to neutralization. This vulnerability is handled as CVE-2026-73233. The attack can be executed remotely. There is not any exploit available.

Detailsinfo

A vulnerability was found in FreeCAD up to 1.1.1. It has been declared as critical. This vulnerability affects the function TaskDlgFemConstraintDisplacement::accept of the file src/Mod/Fem/Gui/TaskFemConstraintDisplacement.cpp of the component FEM Displacement Constraint Task Dialog. The manipulation of the argument xDisplacementFormula/yDisplacementFormula/zDisplacementFormula with an unknown input leads to a neutralization vulnerability. The CWE definition for the vulnerability is CWE-707. The product does not ensure or incorrectly ensures that structured messages or data are well-formed and that certain security properties are met before being read from an upstream component or sent to a downstream component. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

FreeCAD is a free and open-source multiplatform 3D parametric modeler. Prior to 1.1.2, the FEM Displacement Constraint task dialog in src/Mod/Fem/Gui/TaskFemConstraintDisplacement.cpp passes the xDisplacementFormula, yDisplacementFormula, and zDisplacementFormula fields of a Fem::ConstraintDisplacement object through TaskDlgFemConstraintDisplacement::accept() into Gui::Command::doCommand. The escaping helper neutralizes quotation marks but not backslashes, allowing crafted formula text to terminate the generated Python string and execute arbitrary Python code with the FreeCAD process's privileges when a victim accepts the dialog. This issue is fixed in version 1.1.2.

The advisory is available at github.com. This vulnerability was named CVE-2026-73233 since 08/11/2026. The exploitation appears to be easy. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. Successful exploitation requires user interaction by the victim. Technical details are known, but there is no available exploit.

Upgrading to version 1.1.2 eliminates this vulnerability.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Name

• FreeCAD

Version

• 1.1.0
• 1.1.1

Website

• Product: https://github.com/FreeCAD/FreeCAD/

CPE 2.3info

• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion