EUVD-2026-65354
GHSA-5g9x-76r7-xgp8
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Any authenticated user exploits this remotely with no complexity; PR:L reflects authenticated-but-unprivileged access; S:C captures the privilege boundary crossing to Admin scope.
Primary rating from Vendor (Octopus).
CVSS VectorVendor: Octopus
Lifecycle Timeline
3DescriptionCVE.org
In affected versions of the Codefresh platform an authenticated user can utilize an API endpoint to elevate to Admin permissions.
AnalysisAI
Privilege escalation in the Codefresh CI/CD platform allows authenticated platform users to elevate their account to Administrator level by invoking a specific API endpoint, per Codefresh security advisory SA2026-01. All versions covered by CPE cpe:2.3:a:octopus_deploy:codefresh are listed as affected with no minimum version floor specified. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a valid authenticated session on the Codefresh platform - the attacker must possess an existing account of any permission tier within the target organization. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The vendor-supplied CVSS 4.0 vector scores 8.6 (AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N), indicating full confidentiality, integrity, and availability impact within the Codefresh platform via a low-complexity, network-accessible path. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Consult the Codefresh security advisory SA2026-01 at https://advisories.codefresh.io/post/2026/sa2026-01/ for the vendor-recommended fix - no specific patched version number was present in the available input data, so an exact fix version cannot be independently confirmed at time of analysis. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Contact Codefresh support to confirm patch timeline and request emergency notification; immediately enable detailed audit logging of all administrative operations and review recent logs for any suspicious privilege escalation attempts. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-269 – Improper Privilege Management
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today