Skip to content
OpenAdvisories

Package · Go

github.com/portainer/portainer

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.1
    CVE-2026-55761

    Portainer: Unauthenticated Restore Endpoint Allows Admin Takeover on Uninitialised Portainer Instances

    Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. In versions 2.39.0 through 2.39.3 and 2.40.0 until 2.43.0, unauthenticated restore…

    portainer portainer github.com/portainer/portainer Go
  • High 8.5
    CVE-2026-44881 Public exploit

    Portainer: Arbitrary File Read via Git Symlink Injection in Stack Auto-Update

    Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before 2.33.8, 2.39.2, and 2.41.0, Portainer supports deploying sta…

    portainer portainer github.com/portainer/portainer Go
  • High 8.5
    CVE-2026-44850

    Portainer: Bind-mount restriction bypass via HostConfig.Mounts

    Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before 2.33.8, 2.39.2, and 2.41.0, Portainer offers an environment-…

    portainer portainer github.com/portainer/portainer Go
  • High 8.1
    CVE-2026-44882

    Portainer: Kubernetes middleware continues after token validation failure, bypassing endpoint authorization

    Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before 2.33., Portainer proxies requests to Kubernetes clusters thr…

    portainer portainer github.com/portainer/portainer Go
  • High 7.7
    CVE-2026-44883

    Portainer: JWT accepted in URL query leaks tokens to logs and referers

    Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before 2.33.8, 2.39.2, and 2.41.0, Portainer's authentication middl…

    portainer portainer github.com/portainer/portainer Go
  • High 7.5
    CVE-2024-33662

    Portainer improperly uses an encryption algorithm in the AesEncrypt function

    Portainer before 2.20.2 improperly uses an encryption algorithm in the AesEncrypt function.

    github.com/portainer/portainer Go