CVE-2023-47268

MEDIUM

Prusa PrusaSlicer through 2.6.1 - Code Injection

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2023-47268. PoCs published by Pallangyo98.

AI-analyzed exploit summary This is a technical writeup detailing the exploitation chain for the Trickster HTB machine, including CVE-2023-47268 for privilege escalation via PrusaSlicer. It describes the steps, vulnerabilities, and techniques used to achieve full system compromise.

Description

In libslic3r/GCode/PostProcessor.cpp in Prusa PrusaSlicer through 2.6.1, a crafted 3mf project file can execute arbitrary code on a host where the project is sliced and G-code exported.

Exploits (1)

github WRITEUP

by Pallangyo98 · poc

https://github.com/Pallangyo98/Trickster-HTB

View Code ZIP pw:eip

This is a technical writeup detailing the exploitation chain for the Trickster HTB machine, including CVE-2023-47268 for privilege escalation via PrusaSlicer. It describes the steps, vulnerabilities, and techniques used to achieve full system compromise.

Classification

Writeup 90%

Attack Type

Other

Complexity

Complex

Reliability

Reliable

Target: PrusaSlicer (version not specified)

Auth required

Prerequisites: Access to PrestaShop with XSS vulnerability · Database credentials extraction · ChangeDetection.io SSTI vulnerability · PrusaSlicer installed on the target system

MITRE ATT&CK

T1190 - Exploit Public-Facing Application

devstral-2 · analyzed May 08, 2026 Full analysis →