Hacking Prusa printers: 14 findings, ~23 defects, and a full RCE chain
jedisct1 · x · 2026-11-03
Researcher Yannick Dixken spent a week attacking his own Prusa MK4S, ending with 14 findings and roughly 23 individual defects — including a chain yielding full RCE on the printer's main controller via the network. The disclosure was coordinated with Prusa; everything is fixed in Buddy firmware >7.0.0, and CVEs are pending.
The author is a platform engineering/SRE freelancer who had never written Cortex-M assembly before, making this also a record of going from firmware novice to a full exploit chain, plus notes on how Prusa handled it.
More from Safety
- Academic argues technical 'AI safety' work is product work empowering big labs — j_foerst · 2026-11-03
- CJEU advocate general: chatbots' real-time reuse of press content can infringe publishers' rights — Loo_Atreides · 2026-11-03
- Face quality scores can backfire: higher quality often signals a morphing attack — FraunhoferIGD · 2026-11-03
- Red teamer: agentic attacks don't need zero-days, they exploit your security debt — AccBalanced · 2026-11-03
- Questions mount as Anthropic reportedly withheld CVE-2026-98432 exploit details from Ubuntu — jedisct1 · 2026-11-03
- Ehud Reiter: four types of LLM-written papers, and why checking matters — EhudReiter · 2026-11-03