Description
In affected versions of Octopus Server, incorrect validation of the permissions assigned to a user that would allow them to create project triggers could result in the user being able to run runbooks or create deployments they were not authorised to perform.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Octopus Deploy | Octopus Server | 2026.3.0 <2026.3.15863 | — |
| Octopus Deploy | Octopus Server | 2019.11.0 <2026.2.13487 | — |
Advisories 1
- WID-SEC-2026-4434 Octopus Deploy: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 10, 2026