CVE-2018-5706

CVE-2018-5706 is a high-severity privilege escalation vulnerability affecting Octopus Deploy versions prior to 4.1.9. It allows any user with existing user editing permissions (e.g., RoleEdit or TeamEdit) to elevate their privileges to "Administer System" by modifying team configurations. This flaw has a CVSS score of 8.8, indicating a network-exploitable vulnerability with low attack complexity that can lead to complete compromise of confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.