CVE-2025-61982: RCE in OpenFOAM 2506

The impact of CVE-2025-61982 is severe. Successful exploitation allows an attacker to execute arbitrary code on the system processing the malicious OpenFOAM simulation file. This could involve gaining remote control of the system, stealing sensitive data, installing malware, or disrupting operations. The blast radius extends to any system that utilizes OpenFOAM and processes files from untrusted sources. The Code Stream directive, intended for advanced simulation workflows, becomes a critical attack vector if not properly validated. This vulnerability shares similarities with other file parsing vulnerabilities where malicious content can be injected to trigger code execution.

1. Reserved2025-10-21
2. Published2026-02-18
3. EPSS updated2026-03-23

The primary mitigation for CVE-2025-61982 is to upgrade to OpenFOAM version 2506.0.1 or later. If upgrading immediately is not feasible, consider implementing stricter input validation for OpenFOAM simulation files. Specifically, sanitize the Code Stream directive to prevent the execution of potentially malicious code. Network segmentation can also limit the potential impact by isolating systems running OpenFOAM from critical assets. Monitor system logs for unusual processes or file activity related to OpenFOAM. After upgrading, confirm the fix by attempting to process a known malicious simulation file (if available) and verifying that it does not trigger code execution.