• TWEAK
• Hardware
• Printer

Bambu Lab security update

Translate from : Bambu Lab sikkerheds opdatering

There have been many dissatisfied voices on the internet after Bambu Lab announced that a new update with a focus on security would mean new terms for 3rd party access to Bambu Lab's popular 3D Printers. There have been predictions from some quarters that this was the beginning of the end and several have now directly recommended people NOT to buy Bambu Lab 3D Printers.

From our side here at Tweak we would recommend users to take a step back and look at things. Based on the information we have received from our contact at Bambu Lab, everything indicates that you can bury the worst doomsday prophecies in relation to the new update. 3rd party integrations will NOT be closed and the development of these will continue within the framework of the new update.

Instead of falling back on our guesses, I would like to refer to the latest statement from Bambu Lab itself, which is included in the press release below:

Press release from Bambu Lab:

Since announcing our upcoming security enhancement for X-Series printers on January 16th, we have heard concerns from our community about the potential for third-party integration. We believe there has been some misunderstanding about the nature of these changes, and we would like to take this opportunity to explain our approach in detail. The core purpose of this update is to protect users while preserving the open ecosystem that our community values. Through our new Bambu Connect platform, we are creating a secure bridge that allows popular third-party software like OrcaSlicer to continue to be used in both cloud and LAN modes – the latter of which does not require internet access or a user account.

The company's existing security framework, which relies on cloud account binding for normal mode and passwords for LAN mode combined with SSL encryption at the link layer, has served its users well. However, the rapid growth of Bambu Labs' user base and the increasing sophistication of security threats have called for a more robust approach. The new system implements certificate-based authorization and cryptographic signing protocols, which provide improved protection against unauthorized access and potential security risks.

Concerns about safety in the industry

Recent studies have revealed widespread vulnerabilities in the 3D printing ecosystem. A report by CSO Online identified over 3,700 printers exposed to remote attacks, while a Bitdefender study documented cases where unauthorized access was used to demonstrate security issues. In the past year alone, our infrastructure has faced increasingly serious security challenges, with monitoring systems recording up to 30 million unauthorized daily requests and targeted DDoS attacks disrupting service availability.

For a comprehensive overview of these incidents and our response, please refer to our Security Incidents and Cloud Traffic Report.

“The nature of 3D printing technology, with its combination of high-temperature components and precise motion systems, requires robust security measures,” said Dr. Tao, CEO of Bambu Lab. “Our implementation of industry-standard authorization protocols reflects our commitment to user security while maintaining an open ecosystem for legitimate integrations.”

Specific security improvements

The new authorization system addresses several documented vulnerabilities in the current system:

• Unauthorized remote access to motion control systems, potentially leading to hardware damage
• Unverified commands to heating elements, creating security risks
• Leveraging network protocols in both cloud and LAN modes
• Unauthorized API usage that puts a strain on the infrastructure

Understand the new integration experience

Bambu Connect is a streamlined interface that maintains the convenience users expect while adding necessary security protocols. The workflow is carefully designed to minimize disruption to existing user processes:

When using third-party slicing software like OrcaSlicer, users follow their normal workflow to prepare for printing. Once a model is sliced, instead of sending it directly to the printer, users send the file to Bambu Connect via OrcaSlicer’s new export feature (a feature currently under development in collaboration with the OrcaSlicer team). Bambu Connect automatically detects these files and provides a simple interface to send them to the printer.

The integration is seamless and only activated when needed to handle printer communication. Users maintain full visibility into their print workflow, including real-time monitoring of temperatures, print status, and other critical parameters. This approach preserves the flexibility of third-party software while ensuring all printer commands are sent through secure, verified channels.

Visual demonstration of the workflow

The diagram above illustrates how the different components of the system interact under the new security framework.

Third-party software like OrcaSlicer can continue to access printer functionality via Bambu Connect and a new network plugin, which provides a secure interface for printer control and monitoring in both cloud and LAN modes.

When working in LAN mode, Bambu Connect establishes a direct connection between the slicer and the printer within your local network, requiring neither internet access nor a user account.

This maintains the same simple workflow that users expect, while adding security measures at a local level. Whether you choose cloud or LAN operation, this ensures that your printer commands are transmitted securely.

Integration demo: From OrcaSlicer to printer via Bambu Connect
[Video available on Google Drive]

Note: This demo shows our planned implementation for OrcaSlicer integration. The functionality is still under development and is not yet available in current versions of OrcaSlicer. We are actively working with OrcaSlicer and other third-party developers to implement these features.

Implementation timeline and system requirements

The beta firmware release became available on January 17, 2025, exclusively for users who have voluntarily enrolled in the Bambu Labs beta testing program. The official release will follow after the end of the beta testing period.

To participate in the beta testing program, the following software versions are required:

• X1 series 3D printer firmware version 01.08.03.00 or higher
• Bambu Studio version 01.10.02.64 or higher
• Bambu Handy version 2.17.0 or higher

When the official release becomes available, we strongly recommend upgrading to the new firmware for optimal security. Users will have the following options:

• Upgrade to the new firmware (recommended) to benefit from improved security features while using Bambu Connect for third-party integration
• Keep the existing firmware version if older third-party functionality is needed, even if this opts out of important security protections
• Access basic printer monitoring and SD card printing, which remains unrestricted regardless of firmware choice

The rollout will begin globally with X1 series printers through this beta testing program, allowing us to gather valuable user feedback and ensure optimal performance before the official release. This will help us fine-tune the security enhancements based on real-world usage.

Following a successful implementation for the X1 series printers, Bambu Lab plans to develop similar security updates for the P and A series printers, with these improvements planned for future releases.

Partnership approach

Print farm operators and software developers interested in integration can work directly with Bambu Lab to implement proper authorization controls. We welcome partnerships with companies that develop legitimate accessories and software for Bambu Lab printers. For partnership requests, developers can contact devpartner@bambulab.com.