CVE-2024-2975: Octopus Server

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

A race condition was identified through which privilege escalation was possible in certain configurations.

Affected products

• Octopus Octopus Server: from 0.9, before 2023.4.8432 (fixed in 2023.4.8432); from 2024.1.437, before 2024.1.12087 (fixed in 2024.1.12087); from 2024.2.101, before 2024.2.2075 (fixed in 2024.2.2075)

Published 2024-04-09. Last modified 2026-06-17.