octoprint
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 28 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 7, 2018 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →OctoPrint Flask Secret Key hard-coded key
OctoPrint API Key settings.py getSettings information disclosure
OctoPrint Command API system.py executeSystemCommand os command injection
OctoPrint File Download API files.py _validate path traversal
OctoPrint has Timing Side-Channel Vulnerability in API Key Authentication
OctoPrint is vulnerable to XSS through Action Command Notifications and Prompts
OctoPrint-SpoolManager Plugin APIs do not enforce authentication
OctoPrint is Vulnerable to RCE Attacks via Unsanitized Filename in File Upload
OctoPrint Vulnerable to Denial of Service through malformed HTTP request
OctoPrint vulnerable to possible file extraction via upload endpoints
Monitor octoprint in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.