CVE-2026-124628

{
  "etk_id": "ETK-2026-4280",
  "cve_id": "CVE-2026-124628",
  "display_id": "CVE-2026-124628",
  "ghsa_id": "GHSA-35xw-x954-7fwr",
  "euvd_id": "EUVD-2026-124403",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Authorization bypass in Octopus Server LDAP identity editing",
  "summary": "Affected Octopus Server versions incorrectly enforce the setting that disables self-service LDAP identity editing. An authenticated LDAP user may alter their own identity and gain membership in teams mapped to LDAP groups they do not belong to, potentially obtaining administrative privileges when those teams are privileged.",
  "mitigation": "Upgrade Octopus Server to 2026.2.13526 or 2026.3.15936. Until upgraded, restrict access for LDAP users and review mappings from LDAP groups to privileged teams.",
  "vendor": "Octopus Deploy",
  "product": "Octopus Server",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 2018.3.0, < 2026.2.13526",
        ">= 2026.3.0, < 2026.3.15936"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "2026.2.13526",
        "2026.3.15936"
      ],
      "package_name": "Octopus Server",
      "purl": null
    }
  ],
  "cwes": [
    863
  ],
  "cvss_score": 8.7,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": true,
  "check_confidence_basis": "assessed",
  "exploit": false,
  "pipeline_minutes": 77.9679255,
  "t0_at": "2026-11-12T13:32:02.094000+00:00",
  "signals": {
    "check": {
      "at": "2026-11-12T15:41:32.108228+00:00",
      "days": 0.08993072023148148,
      "is_lower_bound": false,
      "measured_at": "2026-11-12T13:32:02.094000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-11-12T13:32:02.094000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-12T13:32:02.094000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-124628"
    }
  }
}