OC
Product
OctoPrint
27
CVEs
0
On KEV
9.4
Max CVSS
2
New 30D
Severity mix
Critical 2High 7Medium 18Low 0
Watch
Add OctoPrint to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-58180 | 8.8 | Sep 9 | OctoPrint is Vulnerable to RCE Attacks via Unsanitized Filename in File Upload Affected: < 1.11.3 |
| CVE-2022-3068 | 8.8 | Sep 21 | Improper Privilege Management in GitHub repository octoprint/octoprint prior to 1.8.3 Affected: before 1.8.3 |
| CVE-2022-2930 | 7.8 | Aug 22 | Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3 Affected: before 1.8.3 |
| CVE-2022-2822 | 7.5 | Aug 15 | An attacker can freely brute force username and password and can takeover any account Affected: before 1.9.0 |
| CVE-2022-1430 | 7.5 | May 18 | Cross-site Scripting (XSS) - DOM in GitHub repository octoprint/octoprint prior to 1.8.0 Affected: before 1.8.0 |
| CVE-2014-125135 New | 7.3 | Oct 26 | OctoPrint Flask Secret Key hard-coded key Affected: 1.0.0; 1.1.0 |
| CVE-2026-54134 | 7.0 | Aug 21 | OctoPrint: File exfiltration possible via query parameters on upload endpoints Affected: < 1.11.8; >= 2.0.0rc1, < 2.0.0rc3 |
Showing 7