{"action":"Upgrade octoprint to 1.11.3 or later.","affected":[{"fixed":"1.11.3","introduced":"0"}],"component":"octoprint","cve_ids":["CVE-2025-58180"],"ecosystem":"PyPI","epss":0.22139,"exploited":false,"fixed_versions":["1.11.3"],"ghsa_id":"GHSA-49mj-x8jp-qvfc","id":"tcs_01M5KEXS2QVWRK3H9AN5H1FEQY","modified_at":"2026-07-07T17:57:00.775499087Z","published_at":"2025-09-09T19:22:22Z","references":["https://osv.dev/vulnerability/GHSA-49mj-x8jp-qvfc","https://github.com/OctoPrint/OctoPrint/security/advisories/GHSA-49mj-x8jp-qvfc","https://nvd.nist.gov/vuln/detail/CVE-2025-58180","https://github.com/OctoPrint/OctoPrint/commit/be4201ef58d9a7c03593252398c16eada90a258b","https://github.com/OctoPrint/OctoPrint/commit/c3a940962f4658a8e035a00388781b1cbd768841","https://github.com/OctoPrint/OctoPrint","https://github.com/OctoPrint/OctoPrint/releases/tag/1.11.3"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-49mj-x8jp-qvfc","url":"https://osv.dev/vulnerability/GHSA-49mj-x8jp-qvfc"}],"summary":"OctoPrint is Vulnerable to RCE Attacks via Unsanitized Filename in File Upload"}