CVE-2026-78210: High severity Octopus Octopus Server vulnerability
Published Oct 1, 2026
·Updated
In affected versions of Octopus Server, users with certain scoped permission sets could execute arbitrary scripts in an environment without possessing the required authorization.
Affected Software
1 affected component
Octopus Octopus Server
Event History
Oct 1, 2026
CVE Published
via MITRE·04:36 AM
Data Sourced
via MITRE·04:36 AM
DescriptionWeakness
Data Sourced
via NVD·05:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access is required to exploit this issue?
An attacker must be a user with certain scoped permission sets. The available information does not identify the specific permissions involved.
2
What could an attacker do if they exploit it?
They could execute arbitrary scripts in an environment for which they do not have the required authorization.