CVE-2025-32788
Medium
Description
OctoPrint provides a web interface for controlling consumer 3D printers. In versions up to and including 1.10.3, OctoPrint has a vulnerability that allows an attacker to bypass the login redirect and directly access the rendered HTML of certain frontend pages. The primary risk lies in potential future modifications to the codebase that might incorrectly rely on the vulnerable internal functions for authentication checks, leading to security vulnerabilities. This issue has been patched in version 1.11.0.
SeverityMedium
CVSS4.3
Exploit probability—
ProductOctoprint
PublishedApr 22, 2025
First seenApr 22, 2025
Weakness typeCWE-290CWE-290
How to fix
Update
- octoprint octoprint1.11.0 or later
- octoprint1.11.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| octoprint octoprint | v < 1.11.0 | 1.11.0 |
| octoprintPyPI | v < 1.11.0 | 1.11.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.