CVE-2025-58180

CVE-2025-58180 affects OctoPrint versions up to and including 1.11.2, allowing an authenticated attacker to achieve arbitrary command execution. By uploading a specially crafted filename, commands can be executed if included in a configured system event handler. This vulnerability carries a high CVSS score of 8.8, indicating a network-based attack with low complexity and high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation, an exploit is publicly available on ExploitDB, though community discussion and media coverage are minimal.