Skip to content

CVE-2025-57521: arbitrary code execution vulnerability in Bambu Studio #7405

@piuppi

Description

@piuppi

Bambu Studio Version

2.1.1.52

Where is the application from?

Bambu Lab Official website

OS version

Windows 11

Additional system information

No response

Printer

Bambu Studio

How to reproduce

Hello Team.

In October 2024, I reported a vulnerability to the Bambu Lab Security Team via email at security(at)bambulab.com. The issue could potentially allow arbitrary code execution in the user context via Bambu Studio.

In January 2025, I received a brief reply apologizing for the delay, but since then I haven’t received any further updates, despite multiple follow-up emails requesting a status or acknowledgment.

I'm opening this issue here to raise awareness and encourage the Security Team to look into the matter. I believe it's important to maintain transparent and timely communication when it comes to security vulnerabilities that may pose real risks to users.

I’m available to provide further technical details in private or through any secure channel you prefer.

Thank you and Regards,
Gianluca Palma

Actual results

...

Expected results

...

Project file & Debug log uploads

...

Checklist of files to include

  • Log file
  • Project file

Metadata

Metadata

Labels

bugSomething isn't working

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions