freecad

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The bridge intentionally listens on localhost and exec()s arbitrary Python sent via POST, enabling local remote-code-execution that can be abused for data exfiltration, credential theft, persistence, or other backdoor behavior.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The FreeCAD Bridge HTTP endpoint (POST /run on 127.0.0.1:8735) accepts outsider-supplied JSON with inline code or a path, reads the provided script text at runtime, and exec()utes it in the live FreeCAD GUI session while capturing stdout.