Beveiligingsadvies

CVE-2026-91778

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-15 07:05:53
Laatst bijgewerkt 2026-09-15 14:40:42
Toegewezen door Octopus
CVSS-score 7.2
Status PUBLISHED

Beschrijving

In affected versions of Octopus Server, users with certain scoped permission sets could execute arbitrary scripts on a worker (including the Octopus Server built-in worker). Incorrect permission validation during script execution would allow the script to execute without the user possessing the required authorisation.