CVE-2014-125135
OctoPrint Flask Secret Key hard-coded key
CVSS Score
7.3
EPSS Score
0.0%
EPSS Percentile
0th
A security vulnerability has been detected in OctoPrint 1.0.0/1.1.0. Affected is an unknown function of the component Flask Secret Key Handler. Such manipulation leads to use of hard-coded cryptographic key . The attack may be performed from remote. Upgrading to version 1.11.1 is able to address this issue. The name of the patch is b4699825d6ab92d5451e5b1e3a06dfb81f86e777. The affected component should be upgraded.
| CWE | CWE-321 CWE-320 |
| Vendor | n/a |
| Product | octoprint |
| Published | Oct 26, 2026 |
| Last Updated | Oct 26, 2026 |
Stay Ahead of the Next One
Get instant alerts for n/a octoprint
Be the first to know when new high vulnerabilities affecting n/a octoprint are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
n/a / OctoPrint
1.0.0 1.1.0
References
vuldb.com: https://vuldb.com/vuln/426129 vuldb.com: https://vuldb.com/vuln/426129/cti vuldb.com: https://vuldb.com/cve/CVE-2014-125135 vuldb.com: https://vuldb.com/submit/994545 github.com: https://github.com/OctoPrint/OctoPrint/commit/b4699825d6ab92d5451e5b1e3a06dfb81f86e777 github.com: https://github.com/OctoPrint/OctoPrint/releases/tag/1.11.1 github.com: https://github.com/OctoPrint/OctoPrint/
Credits
VulDB Vulnerability Moderation Team