CVE Intelligence

Bambuddy Bambuddy vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Bambuddy Bambuddy: 1 record(s), with affected versions and fixes.
cpe:2.3:a:bambuddy:bambuddy

CVE-2026-25505 Critical · 9.8 CWE-306 Feb 4, 2026
Bambuddy: hardcoded JWT signing key and missing authentication
Bambuddy is a self-hosted print archive and management system for Bambu Lab 3D printers. Prior to version 0.1.7, a hardcoded secret key used for signing JWTs is checked into source code and ManyAPI routes do not check authentication. This issue has been patched in version 0.1.7.