What is GHSA-cj2p-238w-jrf5?

GHSA-cj2p-238w-jrf5 is a security advisory published by GitHub Security Advisories with High severity. In affected versions of Octopus Server, an authenticated user with permissions to edit an...

Which CVE IDs does GHSA-cj2p-238w-jrf5 cover?

GHSA-cj2p-238w-jrf5 covers the following CVE IDs: CVE-2026-101169. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-cj2p-238w-jrf5High

In affected versions of Octopus Server, an authenticated user with permissions to edit an...

Vendor

GitHub Security Advisories

Published

September 29, 2026

Last Modified

September 29, 2026

🔗 CVE IDs covered (1)

CVE-2026-101169 →

📋 Description

In affected versions of Octopus Server, an authenticated user with permissions to edit an Environment or Project can set specifically crafted JSON content for the object. Insecure deserialization of this content allows the user to execute arbitrary code in the Octopus Server process.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-101169
https://advisories.octopus.com/post/2026/sa2026-10
https://github.com/advisories/GHSA-cj2p-238w-jrf5