Please do not report security vulnerabilities through public GitHub issues.

Use GitHub's private vulnerability reporting instead: 👉 Report a vulnerability

Include as much of the following as possible:

• Type of vulnerability (e.g. buffer overflow, RCE, XSS)
• File paths of the affected source code
• Steps to reproduce
• Proof-of-concept or exploit code (if available)
• Impact and potential attack scenarios

You will receive a response within 7 days. If the issue is confirmed, a fix will be released as soon as possible.

This policy covers the BambuStudio slicer application and its build tooling. It does not cover the Bambu Lab cloud infrastructure or printer firmware.