Exported GCode contains OctoPrint API Key - Githubissues

fragmuffin / pygcode

GCODE Parser for Python

GNU General Public License v3.0

123 stars 38 forks source link

Exported GCode contains OctoPrint API Key #22

Open akloster opened 4 years ago

akloster commented 4 years ago

I manually inspected some GCode file and by accident discovered the following line:

; printhost_apikey = XXXXXXXXXXXXX

I would not classify this as a severe vulnerability, but I don't think users are aware that their gcode files now contain the access credentials to control their OctoPrint Host. Sharing GCode is rare, but it happens.