CVE-2026-14163: Octopus Deploy Octopus Server vulnerability
Published Aug 20, 2026
·Updated
In affected versions of Octopus Server under certain circumstances it is possible for sensitive variables to be printed in the deployment variable snapshot in clear-text.
Affected Software
1 affected component
Octopus Deploy Octopus Server
Event History
Aug 20, 2026
CVE Published
via MITRE·06:48 AM
Data Sourced
via MITRE·06:48 AM
DescriptionWeakness
Frequently Asked Questions
1
Where can sensitive values be exposed?
Sensitive variables may be printed in clear text in the deployment variable snapshot.
2
Is every Octopus Server deployment known to be affected?
No. The issue is described as occurring only under certain circumstances, but the supplied information does not identify those circumstances or the affected versions.