OctoPrint 1.0.0 - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/octoprint-1.0.0/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 26 Oct 2026 21:46:44 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgOctoPrint: Hard-coded cryptographic key in Flask Secret Key Handler (CVE-2014-125135)https://feed.craftedsignal.io/briefs/2026-10-octoprint-secret-key/Mon, 26 Oct 2026 21:46:44 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-octoprint-secret-key/A security vulnerability has been detected in OctoPrint 1.0.0/1.1.0 involving a hard-coded cryptographic key in the Flask Secret Key Handler.A vulnerability exists in the Flask Secret Key Handler component of OctoPrint versions 1.0.0 and 1.1.0. The implementation uses a hard-coded cryptographic key. The attack may be performed from remote.

Recommendation

Upgrading to version 1.11.1 is able to address this issue.

]]>highadvisory