CVE-2025-48067

OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.11.1 contain a vulnerability that allows an attacker with the FILEUPLOAD permission to exfiltrate files from the host that OctoPrint has read access to, by moving them into the...

CVE-2025-48067

creationtimestamp| type| source ---|---|--- 2025-06-10 15:30:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17895 2025-06-10 17:10:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrbf4z7oo52q...

CVE-2025-48067 OctoPrint vulnerable to possible file extraction via upload endpoints

OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.11.1 contain a vulnerability that allows an attacker with the FILEUPLOAD permission to exfiltrate files from the host that OctoPrint has read access to, by moving them into the...