Login Request a demo
OC
Vendor
Octoprint
2 products with CVEs on record
28
CVEs
0
On KEV
2
New 30D
Products
OC
OctoPrint
Octoprint
9.4
27 CVEs0 on KEV2 new
OC
octoprint/octoprint
octoprint
6.0
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2014-125135
New
OC
OctoPrint
Octoprint
7.3
0%
Oct 26OctoPrint Flask Secret Key hard-coded key
CVE-2013-10077
New
OC
OctoPrint
Octoprint
5.3
0%
Oct 26OctoPrint API Key settings.py getSettings information disclosure
CVE-2026-54134
OC
OctoPrint
OctoPrint
7.0
0%
Aug 21OctoPrint: File exfiltration possible via query parameters on upload endpoints
CVE-2026-35163
OC
OctoPrint
OctoPrint
4.6
0%
Aug 21OctoPrint: XSS in Suppressed Command Notifications
CVE-2026-23892
OC
OctoPrint
OctoPrint
5.9
0%
Jan 27OctoPrint has Timing Side-Channel Vulnerability in API Key Authentication
CVE-2025-64187
OC
OctoPrint
OctoPrint
4.4
0%
Nov 7OctoPrint is vulnerable to XSS through Action Command Notifications and Prompts
CVE-2025-58180
OC
OctoPrint
OctoPrint
8.8
22%
Sep 9OctoPrint is Vulnerable to RCE Attacks via Unsanitized Filename in File Upload
CVE-2025-48879
OC
OctoPrint
OctoPrint
6.5
0%
Jun 10OctoPrint Vulnerable to Denial of Service through malformed HTTP request
CVE-2025-48067
OC
OctoPrint
OctoPrint
4.6
0%
Jun 10OctoPrint vulnerable to possible file extraction via upload endpoints
CVE-2025-32788
OC
OctoPrint
OctoPrint
4.3
0%
Apr 22OctoPrint Authenticated Reverse Proxy Page Authentication Bypass
CVE-2024-49377
OC
OctoPrint
OctoPrint
6.1
0%
Nov 5Jinja2 Templates are vulnerable to XSS attacks due to their configuration in OctoPrint
CVE-2024-51493
OC
OctoPrint
OctoPrint
6.5
0%
Nov 5API key access in settings without reauthentication in OctoPrint
CVE-2024-32977
OC
OctoPrint
OctoPrint
9.4
1%
May 14OctoPrint Authentication Bypass via X-Forwarded-For Header when autologinLocal is enabled
CVE-2024-28237
OC
OctoPrint
OctoPrint
4.8
0%
Mar 18OctoPrint XSS via the "Snapshot Test" feature in Classic Webcam plugin settings
CVE-2024-23637
OC
Octoprint
Octoprint
4.9
1%
Jan 31OctoPrint is a web interface for 3D printer.s OctoPrint versions up until and including 1.9.3 contain a vulnerability that allows malicious admins to change the password of other…
CVE-2023-41047
OC
Octoprint
Octoprint
6.5
1%
Oct 9OctoPrint is a web interface for 3D printers
CVE-2022-3607
OC
octoprint/octoprint
octoprint
6.0
0%
Oct 19Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in octoprint/octoprint
CVE-2022-3068
OC
Octoprint
Octoprint
8.8
1%
Sep 21Improper Privilege Management in GitHub repository octoprint/octoprint prior to 1.8.3
CVE-2022-2888
OC
Octoprint
Octoprint
4.4
0%
Sep 21If an attacker comes into the possession of a victim's OctoPrint session cookie through whatever means, the attacker can use this cookie to authenticate as long as the victim's…
CVE-2022-2872
OC
Octoprint
Octoprint
5.4
1%
Sep 21Unrestricted Upload of File with Dangerous Type in GitHub repository octoprint/octoprint prior to 1.8.3
CVE-2022-2930
OC
Octoprint
Octoprint
7.8
0%
Aug 22Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3
CVE-2022-2822
OC
Octoprint
Octoprint
7.5
1%
Aug 15An attacker can freely brute force username and password and can takeover any account
CVE-2022-1432
OC
Octoprint
Octoprint
6.4
1%
May 18Cross-site Scripting (XSS) - Generic in GitHub repository octoprint/octoprint prior to 1.8.0
CVE-2022-1430
OC
Octoprint
Octoprint
7.5
1%
May 18Cross-site Scripting (XSS) - DOM in GitHub repository octoprint/octoprint prior to 1.8.0
CVE-2021-32561
OC
Octoprint
Octoprint
6.1
1%
May 11OctoPrint before 1.6.0 allows XSS because API error messages include the values of input parameters
CVE-2021-32560
OC
Octoprint
Octoprint
6.5
2%
May 11The Logging subsystem in OctoPrint before 1.6.0 has incorrect access control because it attempts to manage files that are not *.log files
CVE-2018-16710
OC
Octoprint
Octoprint
9.1
2%
Sep 7OctoPrint through 1.3.9 allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests on port 8081