PT-2026-145052
CVE-2026-93487
·
Published
2026-11-11
·
Updated
2026-11-11
Description by
CVSS 4.0
7.1
HighMetricsAV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N
In affected versions of Octopus Server, incorrect validation of the permissions assigned to a user that would allow them to create project triggers could result in the user being able to run runbooks or create deployments they were not authorised to perform.
Found an issue in the description? Have something to add? Feel free to write us 👾