VulnSocial

CVE-2023-47268Disclosure(prusa3d / prusaslicer)

LOWCVSS 5.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In libslic3r/GCode/PostProcessor.cpp in Prusa PrusaSlicer through 2.6.1, a crafted 3mf project file can execute arbitrary code on a host where the project is sliced and G-code exported.

prusa3d CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Exploit / PoC references
Other references
Weakness type (CWE)
CWE-77

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • prusaslicer

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 1 mentions (2026-05-08); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
prusa3d
Products
prusaslicer

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-05-08: 1Mentions · 2026-05-10: 1Technical Details · 2026-05-08: 1Technical Details · 2026-05-10: 105-0805-10
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • CVE@CVEnew
    Disclosure

    CVE-2023-47268 In libslic3r/GCode/PostProcessor.cpp in Prusa PrusaSlicer through 2.6.1, a crafted 3mf project file can execute arbitrary code on a host where the project is sliced a… https://www.cve.org/CVERecord?id=CVE-2023-47268

    Post summary

    The post cites CVE-2023-47268, pointing out that crafted 3MF files can trigger arbitrary code execution in PrusaSlicer up to v2.6.1; it provides technical details but no PoC, exploit, patch, or evidence of active attacks.

    00000226
    57.5K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2023-47268 Arbitrary Code Execution in Prusa PrusaSlicer Through 2.6.1 via Crafted 3MF File https://vulmon.com/vulnerabilitydetails?qid=CVE-2023-47268

    Post summary

    The text discloses an arbitrary code execution vulnerability in PrusaSlicer (v2.6.1 and earlier) triggered by crafted 3MF files, with a link to a vulnerability details page.

    0000071
    4.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appprusa3dprusaslicer---

Explore more

Back to dashboardprusa3d CVEsprusaslicer vulnerabilities