CVE-2026-124627

Octopus Deploy: Mehrere Schwachstellen

Octopus Deploy Octopus Deploy

In affected versions of Octopus Server, incorrect validation of the external identity linked to a newly registered user could result in that user receiving the LDAP-mapped team memberships and associated permissions of another user. This issue only affects instances with LDAP authentication enabled and LDAP groups mapped to Octopus teams.

12. Nov 2026

Ausgewertete Quellen

• CERT-Bund
  WID-SEC-2026-4541
• NVD
  CVE-2026-124627