pygcode
pygcode copied to clipboard
Exported GCode contains OctoPrint API Key
I manually inspected some GCode file and by accident discovered the following line:
; printhost_apikey = XXXXXXXXXXXXX
I would not classify this as a severe vulnerability, but I don't think users are aware that their gcode files now contain the access credentials to control their OctoPrint Host. Sharing GCode is rare, but it happens.