ExploitPublished
OctoPrint 1.11.2 · File Upload
Source Exploit-DB RSS Feed
0
Severity
MediumRated by Threat Radar
Data as of 10 Apr 2026, 00:24 UTC
What to do
AI-suggested
Until official fixes or mitigations are published, users should exercise caution with file uploads and consider restricting access to OctoPrint instances.
Description
OctoPrint 1.11.2 - File Upload
Indicators of compromise
Exploit source code
# Exploit Title: OctoPrint 1.11.2 - File Upload
# Date: 2025-09-28
# Exploit Author: prabhatverma.addada
# Vendor Homepage: https://octoprint.org
# Software Link: https://github.com/OctoPrint/OctoPrint
# Affected Version(s): <= 1.11.2
# Patched Version(s): 1.11.3
# CVE: CVE-2025-58180
# CVSS (per advisory): 7.5
# Platform: Linux / OctoPrint server
# Type: Remote Code Execution (requires authenticated upload / API key or session)
#
# Short description:
# An authenticated attacker with file-uploa…References
Community reviews
Loading reviews…