The vulnerability arises from incomplete escaping of user‑supplied formulas in the FEM Displacement Constraint task dialog. The backslashes in the provided expressions are not neutralized, allowing a crafted input to terminate the generated Python string and execute arbitrary Python code within the FreeCAD process. As a result, an attacker who can provide a formula and trigger the dialog acceptance can run code with the same privileges as the user running FreeCAD, leading to full code execution on the victim machine.

All releases of the FreeCAD 3D parametric modeler prior to version 1.1.2 on any supported operating system are affected. The issue resides in the Fem module, specifically the TaskFemConstraintDisplacement dialog in src/Mod/Fem/Gui/TaskFemConstraintDisplacement.cpp.

The CVSS score of 8.5 indicates high severity, while the EPSS score of less than 1% suggests a low probability of exploitation at present. The vulnerability is not listed in the CISA KEV catalog. Because the flaw allows arbitrary Python execution when a dialog is accepted, the attack vector is local to the user’s session, but compromised credentials or remote control of the GUI could provide additional exposure. The lack of a public exploit at the time of disclosure reduces immediate threat, yet the high potential impact warrants prompt remediation.