What’s Vulnerable › Products

portainer vulnerabilities

27 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Check whether your portainer version is affected

Latest portainer vulnerabilities

• CVE-2026-55761 — Portainer: Unauthenticated Restore Endpoint Allows Admin Takeover on Uninitialised Portainer Instances (CVSS 5.9)
• CVE-2026-44885 — Portainer: Path traversal in backup archive extraction allows arbitrary file write (CVSS 5.5)
• CVE-2026-44884 — Portainer: Missing authorization on custom template file endpoint exposes template content (CVSS 6.5)
• CVE-2026-44883 — Portainer: JWT accepted in URL query leaks tokens to logs and referers (CVSS 7.5)
• CVE-2026-44882 — Portainer: Kubernetes middleware continues after token validation failure, bypassing endpoint authorization (CVSS 8.1)
• CVE-2026-44881 — Portainer: Arbitrary File Read via Git Symlink Injection in Stack Auto-Update (CVSS 9.9)
• CVE-2026-44850 — Portainer: Bind-mount restriction bypass via HostConfig.Mounts (CVSS 8.5)
• CVE-2026-44849 — Portainer: Endpoint security bypass via Swarm service create/update (CVSS 8.8)
• CVE-2026-44848 — Portainer: Missing authorization on Docker plugin endpoints allows host RCE (CVSS 8.8)
• CVE-2025-49593 — Portainer HTTP Headers May Leak to Malicious Container Registries (CVSS 6.8)
• CVE-2024-33662 — (CVSS 7.5)
• CVE-2024-33661 — (CVSS 9.1)
• CVE-2024-29296 — (CVSS 5.3)
• CVE-2022-24961 — (CVSS 9.8)
• CVE-2021-42650 — (CVSS 6.1)
• CVE-2020-24264 — (CVSS 9.8)
• CVE-2020-24263 — (CVSS 8.8)
• CVE-2019-16878 — (CVSS 5.4)
• CVE-2019-16877 — (CVSS 8.8)
• CVE-2019-16876 — (CVSS 7.5)
• CVE-2019-16872 — (CVSS 9.9)
• CVE-2019-16874 — (CVSS 6.5)
• CVE-2019-16873 — (CVSS 5.4)
• CVE-2018-19466 — (CVSS 9.8)
• CVE-2018-19367 — (CVSS 9.8)