Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-53459

Bambuddy's authentication fails open on database errors, allowing unauthenticated access to all endpoints

CVSS 4.0 9.3 CRITICALCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-53459

Published

Bambuddy is a self-hosted print archive and management system for Bambu Lab 3D printers. Starting in version 0.1.6 and prior to version 0.2.4.4, a fail-open in the authentication code allows any attacker to bypass authentication by flooding a public endpoint to exhaust resources causing database access to fail, granting unauthenticated access to all protected endpoints. Version 0.2.4.4 patches the issue.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-53459

Published

bambuddy

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "maziggy",
                    "product": "bambuddy",
                    "versions": [
                        {
                            "version": ">= 0.1.6, < 0.2.4.4",
                            "status": "affected"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON