Octopus: >> Octopus Server >> 2025.3.14792 Security Vulnerabilities
In affected versions of Octopus Deploy Insufficient checks on the project trigger actions allows an unauthorized user to trigger a deployment.
CVSS Score
5.1
EPSS Score
0.002
Published
2026-07-24
In affected versions of Octopus Server, permissions were not checked correctly resulting in any authenticated user being able to make server level changes using a certain API endpoint despite receiving an error.
CVSS Score
6.0
EPSS Score
0.002
Published
2026-06-04