OctoPrint vulnerabilities

22 published CVEs name OctoPrint among the affected products.

Critical 0High 5Medium 15Low 2Not scored 0

CVEs per yearBy the year they were published

CVE-2026-54134
OctoPrint: File exfiltration possible via query parameters on upload endpoints
OctoPrint · OctoPrint
High7.0
CVE-2026-35163
OctoPrint: XSS in Suppressed Command Notifications
OctoPrint · OctoPrint
Medium4.6
CVE-2026-23892
OctoPrint has Timing Side-Channel Vulnerability in API Key Authentication
OctoPrint · OctoPrint
Medium6.0
CVE-2025-64187
OctoPrint is vulnerable to XSS through Action Command Notifications and Prompts
OctoPrint · OctoPrint
Medium4.6
CVE-2025-58180
OctoPrint is Vulnerable to RCE Attacks via Unsanitized Filename in File Upload
OctoPrint · OctoPrint
High7.5
CVE-2025-48879
OctoPrint Vulnerable to Denial of Service through malformed HTTP request
OctoPrint · OctoPrint
Medium6.5
CVE-2025-48067
OctoPrint vulnerable to possible file extraction via upload endpoints
OctoPrint · OctoPrint
Medium5.4
CVE-2025-32788
OctoPrint Authenticated Reverse Proxy Page Authentication Bypass
OctoPrint · OctoPrint
Medium4.3
CVE-2024-49377
Jinja2 Templates are vulnerable to XSS attacks due to their configuration in OctoPrint
OctoPrint · OctoPrint
Medium5.5
CVE-2024-51493
API key access in settings without reauthentication in OctoPrint
OctoPrint · OctoPrint
Medium5.3