CVE-2025-61982
Published: 18 February 2026
Summary
CVE-2025-61982 is a high-severity Code Injection (CWE-94) vulnerability. Its CVSS base score is 7.8 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Malicious File (T1204.002); ranked at the 9.2th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-16 (Memory Protection).
Threat & Defense at a Glance
Threat & Defense Details
Mitigating Controls (NIST 800-53 r5)AI
Requires timely remediation of the specific arbitrary code execution flaw in OpenFOAM's Code Stream directive via patching.
Mandates validation of inputs from specially crafted OpenFOAM simulation files to block code injection.
Provides memory protections such as DEP and ASLR to prevent execution of injected arbitrary code.
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Direct mapping to user-assisted execution of arbitrary code via a specially crafted malicious simulation file.
NVD Description
An arbitrary code execution vulnerability exists in the Code Stream directive functionality of OpenCFD OpenFOAM 2506. A specially crafted OpenFOAM simulation file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
Deeper analysisAI
CVE-2025-61982 is an arbitrary code execution vulnerability in the Code Stream directive functionality of OpenCFD OpenFOAM version 2506. A specially crafted OpenFOAM simulation file can lead to arbitrary code execution when processed by the affected software. The vulnerability is classified under CWE-94 (Code Injection) and carries a CVSS v3.1 base score of 7.8.
Exploitation requires local access to the system (AV:L) with low attack complexity (AC:L), no privileges (PR:N), and user interaction (UI:R), such as opening or loading the malicious simulation file. An attacker who can provide the specially crafted file to a user can achieve arbitrary code execution with high impacts on confidentiality, integrity, and availability (C:H/I:H/A:H), potentially compromising the entire system.
Mitigation details and additional technical analysis are provided in the Talos Intelligence vulnerability report TALOS-2025-2292, accessible at https://talosintelligence.com/vulnerability_reports/TALOS-2025-2292 and https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2292. The CVE was published on 2026-02-18.
Details
- CWE(s)