Log in Start free

OctoPrint

Products

ProductCVEsExploitedLatest
OctoPrint14–Aug 21, 2026
octoprint/octoprint8–Oct 19, 2022

Exploited and recent CVEs

  • CVE-2026-54134 High 7.0 OctoPrint: File exfiltration possible via query parameters on upload endpoints 0.3%
  • CVE-2026-35163 Medium 4.6 OctoPrint: XSS in Suppressed Command Notifications 0.2%
  • CVE-2026-23892 Medium 6.0 OctoPrint has Timing Side-Channel Vulnerability in API Key Authentication 0.4%
  • CVE-2025-64187 Medium 4.6 OctoPrint is vulnerable to XSS through Action Command Notifications and Prompts 0.2%
  • CVE-2025-58180 High 7.5 OctoPrint is Vulnerable to RCE Attacks via Unsanitized Filename in File Upload 22.1%
  • CVE-2025-48879 Medium 6.5 OctoPrint Vulnerable to Denial of Service through malformed HTTP request 0.3%
  • CVE-2025-48067 Medium 5.4 OctoPrint vulnerable to possible file extraction via upload endpoints 0.3%
  • CVE-2025-32788 Medium 4.3 OctoPrint Authenticated Reverse Proxy Page Authentication Bypass 0.2%
  • CVE-2024-49377 Medium 5.5 Jinja2 Templates are vulnerable to XSS attacks due to their configuration in OctoPrint 0.3%
  • CVE-2024-51493 Medium 5.3 API key access in settings without reauthentication in OctoPrint 0.3%
  • CVE-2024-32977 High 7.1 OctoPrint Authentication Bypass via X-Forwarded-For Header when autologinLocal is enabled 0.9%
  • CVE-2024-28237 Medium 4.0 OctoPrint XSS via the "Snapshot Test" feature in Classic Webcam plugin settings 0.4%
  • CVE-2024-23637 Medium 4.2 OctoPrint Unverified Password Change via Access Control Settings 0.5%
  • CVE-2023-41047 Medium 6.2 Improper Neutralization of Special Elements Used in a Template Engine in OctoPrint 0.6%
  • CVE-2022-3607 Medium 6.0 Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in octoprint/octoprint 0.4%
  • CVE-2022-3068 Medium 5.3 Improper Privilege Management in octoprint/octoprint 0.5%
  • CVE-2022-2888 Medium 4.4 Insufficient Session Expiration in octoprint/octoprint 0.3%
  • CVE-2022-2872 Low 3.7 Unrestricted Upload of File with Dangerous Type in octoprint/octoprint 0.7%
  • CVE-2022-2930 Medium 5.3 Unverified Password Change in octoprint/octoprint 0.3%
  • CVE-2022-2822 Low 3.7 Authentication Bypass by Primary Weakness in octoprint/octoprint 0.9%
  • CVE-2022-1432 High 7.5 Cross-site Scripting (XSS) - Generic in octoprint/octoprint 1.2%
  • CVE-2022-1430 High 7.5 Cross-site Scripting (XSS) - DOM in octoprint/octoprint 1.4%