CVE-2020-27155: Octopus Deploy

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

An issue was discovered in Octopus Deploy through 2020.4.4. If enabled, the websocket endpoint may allow an untrusted tentacle host to present itself as a trusted one.

Affected products

• Octopus Octopus Deploy: from 3.11.13, up to and including 2020.4.4

Published 2020-10-22. Last modified 2026-06-17.