Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-118426 EUVD-2026-112580GHSA-j7xx-fgfg-xff8

In affected versions of Octopus Server with the LDAP authentication provider enabled, any authenticated user could call the LDAP user searc…

Published Oct 29, 2026 · Updated Nov 5, 2026 · Assigned by Octopus

Vendor: Octopus Deploy Product: Octopus Server

Description

In affected versions of Octopus Server with the LDAP authentication provider enabled, any authenticated user could call the LDAP user search and LDAP group search.

Affected products

VendorProductAffectedFixed
Octopus Deploy Octopus Server 3.0.0 – < 2026.2.13487, 2026.3.0 – < 2026.3.15909 2026.2.13487

Advisories 1

References