{"action":"Upgrade octoprint to 1.11.3 or later.","affected":[{"fixed":"1.11.3","introduced":"0"}],"component":"octoprint","cve_ids":["CVE-2025-58180"],"ecosystem":"PyPI","epss":0.22139,"exploited":false,"fixed_versions":["1.11.3"],"ghsa_id":"GHSA-49mj-x8jp-qvfc","id":"tcs_01M5KGV87MQP630ZC3FKZ83C0Q","modified_at":"2026-07-07T17:46:29.843888901Z","published_at":"2026-07-07T16:03:04.277623Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1712","https://github.com/OctoPrint/OctoPrint/security/advisories/GHSA-49mj-x8jp-qvfc","https://nvd.nist.gov/vuln/detail/CVE-2025-58180","https://github.com/OctoPrint/OctoPrint/commit/be4201ef58d9a7c03593252398c16eada90a258b","https://github.com/OctoPrint/OctoPrint/commit/c3a940962f4658a8e035a00388781b1cbd768841","https://github.com/OctoPrint/OctoPrint","https://github.com/OctoPrint/OctoPrint/releases/tag/1.11.3","https://pypi.org/project/octoprint","https://github.com/advisories/GHSA-49mj-x8jp-qvfc"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"PYSEC-2026-1712","url":"https://osv.dev/vulnerability/PYSEC-2026-1712"}],"summary":"OctoPrint is Vulnerable to RCE Attacks via Unsanitized Filename in File Upload"}