PatchTheCVEoctoprint vulnerabilities
Recent CVEs affecting octoprint products. 8 tracked.
octoprint has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 8. Most recent: 2026-01-27. Highest priority: CVE-2025-58180 (score 60/100).
- CVE-2025-58180 HIGH 8.8 UPGRADE OctoPrint provides a web interface for controlling consumer 3D printers
- CVE-2026-23892 MEDIUM 5.9 UPGRADE OctoPrint provides a web interface for controlling consumer 3D printers
- CVE-2025-64187 MEDIUM 4.4 UPGRADE OctoPrint provides a web interface for controlling consumer 3D printers
- CVE-2025-48879 MEDIUM 6.5 UPGRADE OctoPrint versions up until and including 1.11.1 contain a vulnerability that allows any unauthenticated attac
- CVE-2025-48067 MEDIUM 5.4 UPGRADE OctoPrint provides a web interface for controlling consumer 3D printers
- CVE-2025-32788 MEDIUM 4.3 UPGRADE OctoPrint provides a web interface for controlling consumer 3D printers
- CVE-2024-51493 MEDIUM 5.3 UPGRADE OctoPrint provides a web interface for controlling consumer 3D printers
- CVE-2024-49377 MEDIUM 5.5 UPGRADE OctoPrint provides a web interface for controlling consumer 3D printers
FAQ
How do I fix octoprint vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is octoprint being exploited right now?
None of the tracked octoprint CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which octoprint CVE should I patch first?
CVE-2025-58180 currently ranks highest (60/100): OctoPrint provides a web interface for controlling consumer 3D printers.