Local Privilege Escalation Vulnerability in Octopus Tentacle by Octopus Deploy

CVE-2021-26557

What is CVE-2021-26557?

A local privilege escalation vulnerability exists in Octopus Tentacle when installed in a custom directory. Due to improper folder ACLs, an unprivileged user can take advantage of DLL side-loading techniques to escalate their privileges, potentially allowing unauthorized access and control over the system. It's crucial for users and administrators to review installation settings and adjust permissions accordingly to mitigate this risk.

References