CVE-2025-0589

CVE-2025-0589 is a medium-severity vulnerability affecting Octopus Deploy when configured with Active Directory authentication. Unauthenticated attackers can exploit two API endpoints to retrieve Active Directory user email addresses/UPNs and display names, as well as group IDs and display names. The CVSS score of 5.3 indicates a network-based attack with low complexity and no user interaction required, leading to a low impact on confidentiality of Active Directory information, but no exposure of data within Octopus Server itself. There is currently no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or KEV entry, though it has garnered some community discussion and media coverage.