CVE-2026-53459
Critical
Description
Bambuddy is a self-hosted print archive and management system for Bambu Lab 3D printers. Starting in version 0.1.6 and prior to version 0.2.4.4, a fail-open in the authentication code allows any attacker to bypass authentication by flooding a public endpoint to exhaust resources causing database access to fail, granting unauthenticated access to all protected endpoints. Version 0.2.4.4 patches the issue.
SeverityCritical
CVSS9.3
Exploit probability—
ProductMaziggy Bambuddy
PublishedSep 15, 2026
First seenSep 15, 2026
Weakness typeCWE-636CWE-636CWE-755CWE-755
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| maziggy bambuddy | >= 0.1.6, < 0.2.4.4 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.