Skip to content
OpenAdvisories
Medium · 5.1 CVE-2026-12702 EUVD-2026-48531GHSA-xqwp-7cxx-5588

In affected versions of Octopus Deploy Insufficient checks on the project trigger actions allows an unauthorized user to trigger a deployme…

Published Jul 24, 2026 · Updated Jul 24, 2026 · Assigned by Octopus

Vendor: Octopus Deploy Product: Octopus Server

Description

In affected versions of Octopus Deploy Insufficient checks on the project trigger actions allows an unauthorized user to trigger a deployment.

Affected products

VendorProductAffectedFixed
Octopus Deploy Octopus Server 2023.0.0 – < 2026.1.11587, 2026.1.0 – < 2026.1.11587, 2026.2.0 – < 2026.2.13190 2026.1.11587

Advisories 1

References