CVE-2022-2888: Octoprint

Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days.

If an attacker comes into the possession of a victim's OctoPrint session cookie through whatever means, the attacker can use this cookie to authenticate as long as the victim's account exists.

Affected products

• Octoprint Octoprint: before 1.8.3 (fixed in 1.8.3)

Published 2022-09-21. Last modified 2026-06-17.