CyberRota Analysis
AI-GeneratedFreeCAD versions prior to 1.1.2 are vulnerable due to a flaw in the PropertyFileIncluded::Restore() function, which improperly handles user-controlled file attributes, allowing for directory traversal and arbitrary file writing. This vulnerability can lead to severe consequences, including persistence, credential compromise, and potential code execution. Users and organizations utilizing FreeCAD for 3D modeling should prioritize upgrading to version 1.1.2 to mitigate these risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
FreeCAD is a free and open-source multiplatform 3D parametric modeler. Prior to 1.1.2, PropertyFileIncluded::Restore() in src/App/PropertyFile.cpp concatenates an attacker-controlled file or data attribute from Document.xml with the document transient path without rejecting directory components, absolute paths, or parent traversal. A crafted .FCStd archive with a matching FileIncluded XML attribute and ZIP entry can therefore write attacker-controlled content to arbitrary locations accessible to the FreeCAD user, potentially enabling persistence, credential compromise, configuration replacement, or code execution. This issue is fixed in version 1.1.2.