Description
In affected versions of the Codefresh platform an authenticated user can utilize an API endpoint to elevate to Admin permissions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Octopus Deploy | Codefresh | 2.0.0 – < 2.11.15 | 2.11.15 |
High · 8.6
CVE-2026-12878
EUVD-2026-65354GHSA-5g9x-76r7-xgp8
In affected versions of the Codefresh platform an authenticated user can utilize an API endpoint to elevate to Admin permissions.
Published Aug 25, 2026 · Updated Aug 25, 2026 · Assigned by Octopus