CVE-2026-53459: Maziggy Bambuddy

Critical severity, CVSS 9.3. EPSS: 0.8% chance of exploitation in the next 30 days.

Bambuddy is a self-hosted print archive and management system for Bambu Lab 3D printers. Starting in version 0.1.6 and prior to version 0.2.4.4, a fail-open in the authentication code allows any attacker to bypass authentication by flooding a public endpoint to exhaust resources causing database access to fail, granting unauthenticated access to all protected endpoints. Version 0.2.4.4 patches the issue.

Affected products

• Maziggy Bambuddy: from 0.1.6, before 0.2.4.4 (fixed in 0.2.4.4)

Published 2026-09-15. Last modified 2026-09-29.