CyberRota Analysis
AI-GeneratedA path traversal vulnerability exists in the File Download API of OctoPrint 1.0.0, allowing remote attackers to manipulate the filename argument and potentially access restricted files on the server. This could lead to unauthorized data exposure, making it critical for users of OctoPrint to prioritize patching or mitigating this issue. Organizations utilizing this software should take immediate action to secure their installations, as exploits are publicly available.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was identified in OctoPrint 1.0.0. Affected by this vulnerability is the function _validate of the file src/octoprint/server/api/files.py of the component File Download API. Such manipulation of the argument filename leads to path traversal. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.