CVE-2026-44850
HighCVSS 8.5Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
Portainer Community Edition versions 2.33.0 through 2.33.7, 2.39.1, and 2.40.0 have a vulnerability in the Disable bind mounts security setting for non-administrators. The enforcement check only inspected the HostConfig.Binds array, ignoring the equivalent HostConfig.Mounts array, allowing authenticated users to mount arbitrary host paths into containers.
Risk Assessment
The risk is that any authenticated user with container creation rights can bypass the bind mounts restriction and access sensitive host system paths, potentially leading to privilege escalation or data leakage.
Recommendation
Immediately upgrade Portainer CE to version 2.33.8, 2.39.2, or 2.41.0 depending on your release branch. After upgrading, verify that the Disable bind mounts setting works correctly for all users.
Other vulnerabilities in Portainer
See all- CVE-2026-44881Critical
Portainer Community Edition from version 2.33.0 to 2.33.8, 2.39.2, and 2.41.0 contains a vulnerability where, during creation or update of Git-backed stacks, go-git v5 creates OS symlinks on the host filesystem without validation, except for .gitmodules. An authenticated user with rights to manage Git stacks can include a docker-compose.yml file as a symlink to an arbitrary path, causing the GET /api/stacks/{id}/file endpoint to read and return the symlink target's contents in the HTTP response.
- CVE-2026-44885Medium
A vulnerability in Portainer Community Edition from version 2.33.0 to 2.33.7 allows writing files to arbitrary locations on the server filesystem via a crafted .tar.gz archive. The ExtractTarGz function does not prevent directory traversal, enabling overwriting of critical system files.
- CVE-2026-44883High
Portainer Community Edition versions 2.33.0 through 2.33.8, 2.39.2, and 2.41.0 accept JWT tokens via the ?token= URL parameter, leading to token leakage through proxy logs, browser history, and Referer headers. A leaked token grants full user privileges until expiration (default 8 hours).
- CVE-2026-44882High
In Portainer Community Edition from version 2.33.0 to 2.33.7, there is a vulnerability due to a missing return statement after a token validation error in the kubeClientMiddleware layer. This causes a request with an invalid token to be forwarded to the Kubernetes cluster, bypassing authorization checks.
- CVE-2026-44849High
A vulnerability in Portainer Community Edition allows bypassing seven EndpointSecuritySettings restrictions when creating Docker Swarm services. These restrictions are enforced on the standard container creation path but not applied on the Swarm service API, enabling unprivileged users to launch containers with dangerous configurations.
- CVE-2026-44848High
In Portainer Community Edition versions 2.33.0 through 2.33.8, 2.39.2, and 2.41.0, the Docker plugin management endpoints (/plugins/*) were not registered with a handler. This allowed standard users with endpoint access to perform privileged plugin operations, including installing and enabling plugins, directly against the underlying Docker daemon.
Original NVD description (English source)
Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before 2.33.8, 2.39.2, and 2.41.0, Portainer offers an environment-level Disable bind mounts for non-administrators security setting that blocks regular users from binding host paths into containers they create through the Portainer-mediated Docker API. The check that enforces this setting only inspected the legacy HostConfig.Binds array on the container-create proxy and never looked at the equivalent HostConfig.Mounts array. Any authenticated user with rights to create containers on a Docker environment where the restriction is enabled could submit a bind-typed entry under HostConfig.Mounts and mount any host path into their container. This vulnerability is fixed in 2.33.8, 2.39.2, and 2.41.0.