PyPI/octoprint CVE-2021-32560: unknown, EPSS 1.50%

The Logging subsystem in OctoPrint before 1.6.0 has incorrect access control because it attempts to manage files that are not *.log files.

Action: Upgrade octoprint to 1.6.0 or later.

pip install octoprint==1.6.0

Affected

Fixed versions

Sources

• osv: PYSEC-2021-29
• https://github.com/OctoPrint/OctoPrint/releases/tag/1.6.0
• https://www.brzozowski.io
• https://octoprint.org/blog/2021/04/27/new-release-1.6.0/
• https://github.com/advisories/GHSA-x9rq-fjp5-qgm9

CVE-2021-32560 · published 2021-05-11T14:15:00Z · modified 2026-06-10T17:02:27.239589818Z · JSON