Buddy Firmware - GoKawiil

Researcher finds 23 security flaws, including RCE, in Prusa MK4S firmware

Freelance engineer Yannick Dixken spent a week probing his Prusa MK4S 3D printer and uncovered 14 findings comprising roughly 23 individual defects, including a remote code execution vulnerability in the Prusa Connect management platform rated 8.1 (High Severity). He demonstrated the exploit by Rickrolling the printer via RCE, and disclosed all issues to Prusa, which has patched them in Buddy firmware versions above 7.0.0.

tomshardware.com · 2026-11-10

Security researcher finds remote code execution chain in Prusa MK4S firmware

An independent security researcher spent a week testing a Prusa MK4S 3D printer running firmware 6.5.7 and uncovered 14 distinct findings totaling roughly 23 defects, mostly in G-code parsing, Prusa Connect, and USB/FAT file handling. These bugs could be chained together to achieve remote code execution on the printer's main controller over the network. Prusa coordinated disclosure with the researcher and has patched all the issues in Buddy firmware versions above 7.0.0.

dixken.de · 2026-11-08