Codefresh
Monthly
Privilege escalation in the Codefresh CI/CD platform allows authenticated platform users to elevate their account to Administrator level by invoking a specific API endpoint, per Codefresh security advisory SA2026-01. All versions covered by CPE cpe:2.3:a:octopus_deploy:codefresh are listed as affected with no minimum version floor specified. A successful attacker gains unrestricted administrative control of the platform - including access to all pipelines, stored secrets, integrations, and organizational settings. No public exploit code has been identified at time of analysis, and CISA KEV listing is not confirmed.
Privilege escalation in the Codefresh CI/CD platform allows authenticated platform users to elevate their account to Administrator level by invoking a specific API endpoint, per Codefresh security advisory SA2026-01. All versions covered by CPE cpe:2.3:a:octopus_deploy:codefresh are listed as affected with no minimum version floor specified. A successful attacker gains unrestricted administrative control of the platform - including access to all pipelines, stored secrets, integrations, and organizational settings. No public exploit code has been identified at time of analysis, and CISA KEV listing is not confirmed.