CVE-2021-21270: Octopus Octopusdsc

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

OctopusDSC is a PowerShell module with DSC resources that can be used to install and configure an Octopus Deploy Server and Tentacle agent. In OctopusDSC version 4.0.977 and earlier a customer API key used to connect to Octopus Server is exposed via logging in plaintext. This vulnerability is patched in version 4.0.1002.

Affected products

• Octopus Octopusdsc: before 4.0.1002 (fixed in 4.0.1002)

Published 2021-01-22. Last modified 2026-06-17.