Skip to content
OpenAdvisories

Vendor

portainer

12 known vulnerabilities.

Products

portainer 10 Portainer Community Edition 1 Portainer CE 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.8
    CVE-2026-72533

    Portainer Portainer CE - Authentication Bypass

    An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated low-privileged users to bypass Docker proxy authorization checks via non-canonical URL normalization, defeating all authorization middleware. The proxy endpoint fails t…

    portainer Portainer CE
  • High 7.1
    CVE-2026-55761

    Portainer: Unauthenticated Restore Endpoint Allows Admin Takeover on Uninitialised Portainer Instances

    Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. In versions 2.39.0 through 2.39.3 and 2.40.0 until 2.43.0, unauthenticated restore…

    portainer portainer github.com/portainer/portainer Go
  • High 8.5
    CVE-2026-44881 Public exploit

    Portainer: Arbitrary File Read via Git Symlink Injection in Stack Auto-Update

    Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before 2.33.8, 2.39.2, and 2.41.0, Portainer supports deploying sta…

    portainer portainer github.com/portainer/portainer Go
  • High 8.5
    CVE-2026-44850

    Portainer: Bind-mount restriction bypass via HostConfig.Mounts

    Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before 2.33.8, 2.39.2, and 2.41.0, Portainer offers an environment-…

    portainer portainer github.com/portainer/portainer Go
  • High 8.1
    CVE-2026-44882

    Portainer: Kubernetes middleware continues after token validation failure, bypassing endpoint authorization

    Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before 2.33., Portainer proxies requests to Kubernetes clusters thr…

    portainer portainer github.com/portainer/portainer Go
  • High 7.7
    CVE-2026-44883

    Portainer: JWT accepted in URL query leaks tokens to logs and referers

    Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before 2.33.8, 2.39.2, and 2.41.0, Portainer's authentication middl…

    portainer portainer github.com/portainer/portainer Go
  • High 8.5
    CVE-2026-33590

    Insecure default permissions in Portainer CE

    Insecure default settings of Portainer CE grant regular (non-admin) users privileges that allow host filesystem access and host-level code execution. An authenticated non-administrative user with endpoint access can exploit these settings to read host files o…

    portainer Portainer Community Edition