CVE-2025-48067 - CVE House
Back to Database
Status published Medium CVE-2025-48067

OctoPrint vulnerable to possible file extraction via upload endpoints

Vulnerability Description

OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.11.1 contain a vulnerability that allows an attacker with the FILE_UPLOAD permission to exfiltrate files from the host that OctoPrint has read access to, by moving them into the upload folder where they then can be downloaded from. This vulnerability is fixed in 1.11.2.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-48067

Credits & Attribution

No credits recorded in the NVD database.

References

More from OctoPrint

View All →
CVE-2025-64187
OctoPrint is vulnerable to XSS through Action Command Notifications and Prompts
Medium 4.6
CVE-2025-58180
OctoPrint is Vulnerable to RCE Attacks via Unsanitized Filename in File Upload
High 7.5
CVE-2025-48879
OctoPrint Vulnerable to Denial of Service through malformed HTTP request
Medium 6.5
CVE-2025-32788
OctoPrint Authenticated Reverse Proxy Page Authentication Bypass
Medium 4.3
CVE-2024-51493
API key access in settings without reauthentication in OctoPrint
Medium 5.3

Affected Vendor

Affected Software

OctoPrint
Vulnerable Versions:
< 1.11.2

Timeline

Official Publish: June 10th, 2025
Last Modified: June 10th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L

Weaknesses (CWE)

CWE-73

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1005 Data from Local System
Collection
T1105 Ingress Tool Transfer
Command and Control
T1574 Hijack Execution Flow
Privilege Escalation
T1565 Data Manipulation
Impact