HIGH 7.2 NVD

CVE-2026-91778

In affected versions of Octopus Server, users with certain scoped permission sets could execute arbitrary scripts on a worker (including the Octopus Server buil

In affected versions of Octopus Server, users with certain scoped permission sets could execute arbitrary scripts on a worker (including the Octopus Server built-in worker). Incorrect permission validation during script execution would allow the script to execute without the user possessing the required authorisation.

References

https://advisories.octopus.com/post/2026/sa2026-08

Published: 2026-09-15 · Source: NVD · Feed updated: 2026-09-15

This high severity vulnerability with a CVSS score of 7.2 was published on 2026-09-15 via NVD.

vulnfeed aggregates 13505 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.