OctoPrint 1.0.0 File Download API files.py _validate filename path traversal 🚫 [False Positive]

Noticeinfo

⚠️ It seems this issue is a false-positive. Please confirm the sources provided and consider disregarding this entry. The exact code first shipped in 1.6.0, does not exist in the cited 1.0.0, and in every version where it exists the claimed missing protection is already implemented.

Productinfo

Name

• OctoPrint

Version

• 1.0.0

Timelineinfo

09/21/2026 Advisory disclosed
09/21/2026 +0 days VulDB entry created
10/13/2026 +22 days VulDB entry last update

Sourcesinfo

False Positive: Yes

CNA: VulDB
CVE: CVE-2026-94489 (🔒)

GCVE (CVE): GCVE-0-2026-94489
GCVE (VulDB): GCVE-100-408189
scip Labs: https://www.scip.ch/en/?labs.20161013

Entryinfo

Created: 09/21/2026 19:50
Updated: 10/13/2026 17:05
Changes: 09/21/2026 19:50 (54), 10/13/2026 17:05 (5)
Complete: 🔍
Cache ID: 216::103

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion

Do you know our Splunk app?

Download it now for free!