Skip to content
OpenAdvisories
High · 7.1 CVE-2026-78210 EUVD-2026-90474GHSA-rm37-9r6w-4vwr

In affected versions of Octopus Server, users with certain scoped permission sets could execute arbitrary scripts in an environment without…

Published Oct 1, 2026 · Updated Oct 1, 2026 · Assigned by Octopus

Vendor: Octopus Deploy Product: Octopus Server

Description

In affected versions of Octopus Server, users with certain scoped permission sets could execute arbitrary scripts in an environment without possessing the required authorization.

Affected products

VendorProductAffectedFixed
Octopus Deploy Octopus Server 2019.5.9 – < 2026.1.11739, 2026.2.0 – < 2026.2.13364, 2026.3.0 – < 2026.3.13951 2026.1.11739

Advisories 1

References