CVE Catalog
CVE-2026-12702
MediumCVSS 4.9Exploitation Probability (EPSS)
Low risk0.19%
9th percentile - higher than 9% of all known CVEs
Summary
In affected versions of Octopus Deploy, insufficient checks on project trigger actions allow an unauthorized user to trigger a deployment.
Risk Assessment
An unauthorized user can trigger a deployment, potentially leading to unwanted changes in the production environment.
Recommendation
Update Octopus Deploy to the latest version containing the fix.
Other vulnerabilities in Octopus Deploy
Original NVD description (English source)
In affected versions of Octopus Deploy Insufficient checks on the project trigger actions allows an unauthorized user to trigger a deployment.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS