CVE-2025-61982

HIGH 7.8

CVSS Score

7.8

EPSS Score

0.0%

EPSS Percentile

0th

An arbitrary code execution vulnerability exists in the Code Stream directive functionality of OpenCFD OpenFOAM 2506. A specially crafted OpenFOAM simulation file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

CWE	CWE-94
Vendor	opencfd
Product	openfoam
Published	Feb 18, 2026
Last Updated	Feb 18, 2026

Stay Ahead of the Next One

Get instant alerts for opencfd openfoam

Be the first to know when new high vulnerabilities affecting opencfd openfoam are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Affected Versions

OpenCFD / OpenFOAM

2506

References

NVD ↗ CVE.org ↗ EPSS Data ↗

talosintelligence.com: https://talosintelligence.com/vulnerability_reports/TALOS-2025-2292 talosintelligence.com: https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2292

Credits

Discovered by Dimitrios Tatsis of Cisco Talos.