CVE-2026-91778 in Octopus Server
Resumen
por MITRE • 2026-09-15
In affected versions of Octopus Server, users with certain scoped permission sets could execute arbitrary scripts on a worker (including the Octopus Server built-in worker). Incorrect permission validation during script execution would allow the script to execute without the user possessing the required authorisation.
Be aware that VulDB is the high quality source for vulnerability data.