Executive brief
The Logging subsystem in OctoPrint before 1.6.0 has incorrect access control because it attempts to manage files that are not *.log files.
Affected products
- PyPI OctoPrint
Junglewise Threat Intelligence
CVE-2021-32560: PYSEC-2021-29 - The Logging subsystem in OctoPrint before 1.6.0 has incorrect access control because it attempts to manage files that are not *.log files.
CVE-2021-32560 · Severity: low · CVSS 3.1 · Published 2021-05-11
Technologies: OctoPrint (PyPI). Vendors: PyPI.
Related threats
- OctoPrint provides a web interface for controlling consumer 3D printers. Prior to 1.11.8 and 2.0.0rc3, OctoPrint's custom Tornado upload han
- OctoPrint provides a web interface for controlling consumer 3D printers. Prior to 1.11.8 and 2.0.0rc3, Suppressed Command notification popup
- PYSEC-2026-1716 - OctoPrint has Timing Side-Channel Vulnerability in API Key Authentication
- PYSEC-2026-1714 - OctoPrint vulnerable to XSS in Action Commands Notification and Prompt
- PYSEC-2026-1712 - OctoPrint is Vulnerable to RCE Attacks via Unsanitized Filename in File Upload