CVE-2026-117466: High severity Octopus Deploy Octopus Server vulnerability
Published Oct 27, 2026
·Updated
In affected versions of Octopus Server, a user holding the System Manager role could escalate their privileges to full system Administrator.
Affected Software
1 affected component
Octopus Deploy Octopus Server
Event History
Oct 27, 2026
CVE Published
via MITRE·10:40 AM
Data Sourced
via MITRE·10:40 AM
DescriptionWeakness
Data Sourced
via NVD·11:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The attacker must already hold the System Manager role in Octopus Server. Successful exploitation could elevate that user to full system Administrator privileges.