Description
In affected versions of Octopus Server under certain circumstances it is possible for sensitive variables to be printed in the deployment variable snapshot in clear-text.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Octopus Deploy | Octopus Server | 3.2.6 – < 2026.1.11587, 2026.2.61 – < 2026.2.13190 | 2026.1.11587 |
Advisories 1
- WID-SEC-2026-2928 Octopus Deploy Server: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Aug 19, 2026