Vulnerability Description
In affected versions of Octopus Server, a user with permission to modify non built-in external feeds could exploit a path traversal flaw to overwrite arbitrary files on the server, which in some configurations could lead to remote code execution.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-92355?
CVE-2026-92355 is a documented vulnerability. In affected versions of Octopus Server, a user with permission to modify non built-in external feeds could exploit a path traversal flaw to overwrite arbitrary files on the server, which in some confi...
How severe is CVE-2026-92355?
CVSS scoring is not yet available for CVE-2026-92355. Check NVD for updates.
Is there a patch for CVE-2026-92355?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.