CVE-2021-31822: Octopus Tentacle

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

When Octopus Tentacle is installed on a Linux operating system, the systemd service file permissions are misconfigured. This could lead to a local unprivileged user modifying the contents of the systemd service file to gain privileged access.

Affected products

  • Octopus Tentacle: from 3.15.4, before 6.1.1116 (fixed in 6.1.1116)

Published 2021-11-24. Last modified 2026-06-17.