CVE-2021-26557: Octopus Tentacle

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

When Octopus Tentacle is installed using a custom folder location, folder ACLs are not set correctly and could lead to an unprivileged user using DLL side-loading to gain privileged access.

Affected products

• Octopus Tentacle: from 3.15.4, before 6.0.489 (fixed in 6.0.489)

Published 2021-10-07. Last modified 2026-06-17.