CVE-2021-32560: Octoprint

Medium severity, CVSS 6.5. EPSS: 1.5% chance of exploitation in the next 30 days.

The Logging subsystem in OctoPrint before 1.6.0 has incorrect access control because it attempts to manage files that are not *.log files.

Affected products

• Octoprint Octoprint: before 1.6.0 (fixed in 1.6.0)

Published 2021-05-11. Last modified 2026-06-17.