{"id":"CVE-2014-125135","published":"2026-10-26T20:17:09.347","lastModified":"2026-10-26T20:17:10.510","description":"A security vulnerability has been detected in OctoPrint 1.0.0/1.1.0. Affected is an unknown function of the component Flask Secret Key Handler. Such manipulation leads to use of hard-coded cryptographic key\r . The attack may be performed from remote. Upgrading to version 1.11.1 is able to address this issue. The name of the patch is b4699825d6ab92d5451e5b1e3a06dfb81f86e777. The affected component should be upgraded.","cvssScore":7.3,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cwes":["CWE-320","CWE-321"],"vendors":[],"products":[],"references":[{"url":"https://github.com/OctoPrint/OctoPrint/","tags":[]},{"url":"https://github.com/OctoPrint/OctoPrint/commit/b4699825d6ab92d5451e5b1e3a06dfb81f86e777","tags":[]},{"url":"https://github.com/OctoPrint/OctoPrint/releases/tag/1.11.1","tags":[]},{"url":"https://vuldb.com/cve/CVE-2014-125135","tags":[]},{"url":"https://vuldb.com/submit/994545","tags":[]},{"url":"https://vuldb.com/vuln/426129","tags":[]},{"url":"https://vuldb.com/vuln/426129/cti","tags":[]}],"exploitRefs":[{"url":"https://github.com/OctoPrint/OctoPrint/","tags":[]},{"url":"https://github.com/OctoPrint/OctoPrint/commit/b4699825d6ab92d5451e5b1e3a06dfb81f86e777","tags":[]},{"url":"https://github.com/OctoPrint/OctoPrint/releases/tag/1.11.1","tags":[]}],"hasPoc":true,"ai":null}