The flaw resides in FreeCAD’s BIM Workbench, where the BimTDPage.py module evaluates data extracted from an SVG template’s scale field using Python’s eval. When a user creates a TechDraw page from a malicious SVG file, the untrusted data is executed as Python code, enabling an attacker to run arbitrary code within the FreeCAD process. This is a classic code‑execution weakness, categorized as CWE‑95. The consequence is that any payload supplied by the attacker will run with the current user’s privileges, potentially compromising local data, files, and the machine’s security.

All FreeCAD releases from version 0.19 through 1.1.1 are affected. The vulnerability applies regardless of operating system—Windows, macOS, or Linux—whenever the BIM Workbench processes an SVG template. The advisory lists the product as FreeCAD:FreeCAD and notes that the issue was resolved in release 1.1.1, which was made available on GitHub. Users who have not updated beyond 1.1.1 are at risk.

With a CVSS score of 7.8 the flaw carries moderate‑to‑high severity. Exploitation requires a user to open a crafted SVG file locally; no EPSS score is provided, and the vulnerability is not listed in the CISA KEV catalog, indicating a low likelihood of widespread automated attacks. Nevertheless, any environment that accepts external SVG files from untrusted sources faces a real risk of local code execution, allowing an attacker full access to the system running FreeCAD.