CyberRota Analysis
AI-GeneratedA security vulnerability in OctoPrint 1.0.0 allows for OS command injection through the executeSystemCommand function in the Command API, enabling remote attackers to manipulate command arguments. This flaw poses a medium risk, as it can lead to unauthorized command execution on the server. Users and administrators of OctoPrint should prioritize patching or mitigating this vulnerability to safeguard their systems against potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A security flaw has been discovered in OctoPrint 1.0.0. Affected by this issue is the function executeSystemCommand of the file src/octoprint/server/api/system.py of the component Command API. Performing a manipulation of the argument command results in os command injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.