CVE-2024-12226: Octopus Deploy Kubernetes Worker Or Kubernetes Agent

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

In affected versions of the Octopus Kubernetes worker or agent, sensitive variables could be written to the Kubernetes script pod log in clear-text. This was identified in Version 2 however it was determined that this could also be achieved in Version 1 and the fix was applied to both versions accordingly.

Affected products

• Octopus Deploy Kubernetes Worker Or Kubernetes Agent: from 1, before 1.19.0 (fixed in 1.19.0); from 2, before 2.8.0 (fixed in 2.8.0)

Published 2025-01-16. Last modified 2026-06-17.