CVE Feed

    Dashboard / CVE / CVE-2014-125135

    CVE-2014-125135

    A security vulnerability has been detected in OctoPrint 1.0.0/1.1.0. Affected is an unknown function of the component Flask Secret Key Handler. Such manipulation leads to use of hard-coded cryptographic key . The attack may be performed from remote. Upgrading to version 1.11.1 is able to address this issue. The name of the patch is b4699825d6ab92d5451e5b1e3a06dfb81f86e777. The affected component should be upgraded.

    Published:Oct 26, 2026
    Last Modified:Oct 26, 2026
    EPS:Oct 26, 2026
    EPSS Score:0.00478
    CVSS Score:7.3

    Affected Products

    Vendor
    Octoprint
    Product
    Octoprint

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2013-10077 (CVSS 5.5) — A weakness has been identified in OctoPrint 1.0.0. This impacts the function getSettings of the file src/octop…
    CVE-2026-94490 — ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its C…
    CVE-2026-94489 — ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its C…
    CVE-2026-54134 (CVSS 7) — OctoPrint provides a web interface for controlling consumer 3D printers. Prior to 1.11.8 and 2.0.0rc3, OctoPri…
    CVE-2026-35163 (CVSS 4.6) — OctoPrint provides a web interface for controlling consumer 3D printers. Prior to 1.11.8 and 2.0.0rc3, Suppres…
    CVE-2026-23892 (CVSS 6) — OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up to and includin…
    CVE-2025-64187 (CVSS 4.6) — OctoPrint provides a web interface for controlling consumer 3D printers. Versions 1.11.3 and below are affecte…
    CVE-2025-62169 (CVSS 8.1) — OctoPrint-SpoolManager is a plugin for managing spools and all their usage metadata. In versions 1.8.0a2 and o…
    CVE-2025-58180 (CVSS 7.5) — OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and inclu…
    CVE-2025-48879 (CVSS 6.5) — OctoPrint versions up until and including 1.11.1 contain a vulnerability that allows any unauthenticated attac…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High