Description
Insecure default settings of Portainer CE grant regular (non-admin) users privileges that allow host filesystem access and host-level code execution. An authenticated non-administrative user with endpoint access can exploit these settings to read host files or obtain root equivalent
access on the host.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Portainer | Portainer Community Edition | < 2.39.0, < 2.38.0 | 2.39.0 |