What’s Vulnerable › Vulnerabilities
CVE-2026-44884: Portainer: Missing authorization on custom template file endpoint exposes template content
- Severity: medium (CVSS 6.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2026-05-28 · updated 2026-07-21
- Weakness: CWE-862
Description
Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before 2.33.8 and 2.39.1, a missing authorization vulnerability in the Custom Template file endpoint (GET /api/custom_templates/{id}/file) allows any authenticated user to read the file content of any custom template by enumerating sequential integer IDs, bypassing Resource Control access restrictions. Template files may contain environment-specific values such as connection strings, API tokens, or registry credentials that administrators would not expect standard users to read. This vulnerability is fixed in 2.33.8 and 2.39.1.
Affected products
- portainer: from 2.33.0 before 2.33.8; from 2.39.0 before 2.39.1 — fixed in 2.33.8, 2.39.1
How to fix
Upgrade to a fixed version: portainer 2.33.8, 2.39.1. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2026-44884 or the next vulnerability affects your stack