CVE-2024-8374

What it actually does

Improper handling of the drop_to_buildplate property in 3MF files allows the value to be passed directly to Python eval() without sanitization, resulting in arbitrary code execution when the file is loaded.

Why it matters to the business

Attackers can compromise systems that process shared 3D model files, leading to potential data theft, ransomware deployment, or unauthorized access across environments that rely on this software for model handling; high ecosystem prevalence increases exposure risk.

How an attack unfolds

An attacker crafts a malicious 3MF ZIP archive containing a manipulated drop_to_buildplate property with injected Python code, uploads it to a 3D model database, and waits for a victim to load the file in the vulnerable software, triggering eval() and executing the payload.

How to fix it

Upgrade to a fixed version such as facebook/wangle (GIT) commit 5b3bceca875e4ea4ed9d14c20b20ce46c92c13c6; avoid loading untrusted 3MF files until patched.

How to confirm the fix worked

Confirm the software version is updated to the fixed commit; test by attempting to load a 3MF file with a safe drop_to_buildplate value and verify no code execution occurs.

Typical attack path

1. Craft malicious 3MF file with unsanitized drop_to_buildplate value containing Python code
2. Distribute the file via public 3D model sharing sites or direct sharing
3. Victim loads the 3MF file in the affected software
4. eval() executes the injected code, granting attacker control

How to detect it

Review logs for Python eval() calls or errors triggered during 3MF file parsing; inspect recent 3MF files for anomalous property values; check for unexpected processes or network activity following model imports.

What your security team should do

• Immediately apply the fixed commit 5b3bceca875e4ea4ed9d14c20b20ce46c92c13c6 across all instances
• Implement file scanning or sandboxing for incoming 3MF files
• Monitor for unusual process behavior after 3MF file loads
• Educate users on risks of downloading models from untrusted sources