high8.8
CVE-2026-12878
In affected versions of the Codefresh platform an authenticated user can utilize an API endpoint to elevate to Admin permissions.
Impact
In affected versions of the Codefresh platform an authenticated user can utilize an API endpoint to elevate to Admin permissions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Octopus | Codefresh | from 2.0.0 before 2.11.15 |