CVE-2022-2822

CVE-2022-2822 describes a critical authentication vulnerability in OctoPrint, allowing unauthenticated attackers to brute-force usernames and passwords to gain unauthorized access to user and administrative accounts. With a CVSS score of 7.5 (HIGH), this flaw is easily exploitable over the network with low attack complexity, leading to complete compromise of confidentiality. While there is no evidence of active exploitation, public exploit code, or significant community discussion, the absence of rate limiting or account lockout mechanisms makes it a straightforward target for automated attacks.