CVE Intelligence

Bambuddy vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Bambuddy products: 1 record(s), with severity, exploitation and fixes.

Bambuddy 1

Exploited only (KEV) →

CVE-2026-25505 Critical · 9.8 CWE-306 Feb 4, 2026
Bambuddy: hardcoded JWT signing key and missing authentication
Bambuddy is a self-hosted print archive and management system for Bambu Lab 3D printers. Prior to version 0.1.7, a hardcoded secret key used for signing JWTs is checked into source code and ManyAPI routes do not check authentication. This issue has been patched in version 0.1.7.