Description

A security flaw has been discovered in OctoPrint 1.0.0. Affected by this issue is the function executeSystemCommand of the file src/octoprint/server/api/system.py of the component Command API. Performing a manipulation of the argument command results in os command injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "4.7",
  "pubDate": "2026-09-22T00:16:32.360Z",
  "pubdate": "2026-09-22T00:16:32.360Z",
  "executiveSummary": "A critical OS command injection vulnerability exists within the Command API of OctoPrint 1.0.0. The flaw resides in the executeSystemCommand function, which fails to adequately sanitize user-supplied input before passing it to system-level execution routines. This vulnerability allows an unauthenticated or remote attacker to inject and execute arbitrary operating system commands with the privileges of the OctoPrint process.\nThe vulnerability represents a severe security risk, as successful exploitation enables full system compromise, unauthorized data access, and the potential for persistent lateral movement within the host network. Because the exploit is publicly available and the vendor has not provided a responsive remediation path, instances of OctoPrint 1.0.0 remain highly exposed to opportunistic attacks. System administrators are advised to restrict network access to the API and evaluate the necessity of the current deployment environment.",
  "technicalDetails": "The root cause of this vulnerability is improper neutralization of special elements used in an OS command within the 'executeSystemCommand' function located in 'src/octoprint/server/api/system.py'. The function is designed to handle administrative system commands via the Command API; however, it fails to implement sufficient input validation or utilize safe execution wrappers to prevent command chaining or argument injection.\nThe vulnerability manifests when the application accepts a 'command' argument from an HTTP request and passes it directly to an underlying system shell or execution environment without filtering shell metacharacters such as semicolons, pipes, or ampersands. By manipulating the 'command' argument, an attacker can append malicious payloads to the intended command structure. For example, injecting a string containing '; rm -rf / ;' or a reverse shell payload allows the attacker to terminate the intended process and execute arbitrary code with the effective user ID of the OctoPrint service.\nThe attack flow proceeds as follows: First, the attacker identifies the reachable Command API endpoint exposed by the OctoPrint server. Second, the attacker crafts a malicious HTTP request targeting the 'executeSystemCommand' function, substituting the expected system command with a carefully constructed string containing shell-injected commands. Third, the application's API handler receives the input and proceeds to pass the unvalidated string to the operating system's execution interface. Finally, the OS interprets the injected shell metacharacters, executing the attacker's payload in the same context as the OctoPrint process.\nThe impact of this vulnerability is total system compromise. Since the command execution occurs with the privileges of the OctoPrint service, the attacker gains the ability to read, modify, or delete arbitrary files on the filesystem, install persistent backdoors, or pivot into the internal network if the host system is multihomed. Given the public availability of the exploit, the barrier to entry is minimal, requiring no advanced knowledge of the system architecture to execute. The exposure is considered remote, as the API endpoint is typically network-accessible, facilitating widespread exploitation of internet-facing instances."
}