Privilege escalation in Octopus Deploy Codefresh

CVE-2026-12878

In affected versions of the Codefresh platform an authenticated user can utilize an API endpoint to elevate to Admin permissions.

Vulnerability class: Privilege Escalation

Affected products

Weakness classification (CWE)

References