Octopus: >> Octopus Server >> 2025.4.10446 Security Vulnerabilities
In affected versions of Octopus Server under certain circumstances it is possible for sensitive variables to be printed in the deployment variable snapshot in clear-text.
CVSS Score
7.1
EPSS Score
0.002
Published
2026-08-20
In affected versions of Octopus Deploy Insufficient checks on the project trigger actions allows an unauthorized user to trigger a deployment.
CVSS Score
5.1
EPSS Score
0.003
Published
2026-07-24
In affected versions of Octopus Server, permissions were not checked correctly resulting in any authenticated user being able to make server level changes using a certain API endpoint despite receiving an error.
CVSS Score
6.0
EPSS Score
0.004
Published
2026-06-04