p PatchFirst

PatchFirst · Latest vulnerabilities

bambuddy vulnerabilities

Vulnerabilities published for bambuddy in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2026-25505

    Critical · CVSS 9.8EPSS 0.81%Fix available

    Bambuddy Uses Hardcoded Secret Key + Many API Endpoints do not Require Authentication

    Bambuddy is a self-hosted print archive and management system for Bambu Lab 3D printers. Prior to version 0.1.7, a hardcoded secret key used for signing JWTs is checked into source code and ManyAPI routes do not check authentication. This issue has been patched in version 0.1.7.

    bambuddyPython
    • Update to 0.1.7
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →