CVE-2026-44850: Portainer Community Edition authorization bypass in bind-mount restriction

CVE-2026-44850 · Severity: high · CVSS 8.5 · Published 2026-05-28

Portainer is a management platform used to run and monitor containerized applications like Docker and Kubernetes. A security flaw allowed standard users to bypass restrictions intended to prevent them from accessing the underlying server's file system. By exploiting this, an authorized user could gain full access to sensitive files on the host server, potentially leading to a total compromise of the infrastructure and all other applications running on it.

Technologies: github.com/portainer/portainer (Go), Portainer, Portainer Community Edition. Vendors: Go, Portainer.

Quick answers

Is CVE-2026-44850 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-44850 being exploited in the wild.
How severe is CVE-2026-44850?
High severity, with a CVSS score of 8.5, published 28 May 2026.
Which products and versions are affected?
github.com/portainer/portainer (Go) SEMVER:introduced=0, SEMVER:introduced=2.33.0,fixed=2.33.8; Portainer >= 2.33.0, < 2.33.8; >= 2.39.0, < 2.39.2; >= 2.40.0, < 2.41.0; Portainer Community Edition 2.33.0 to < 2.33.8, 2.39.0 to < 2.39.2, 2.40.0 to < 2.41.0.
Is there a fix for CVE-2026-44850?
Yes. github.com/portainer/portainer (Go): upgrade to 2.33.8 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-44850 attacked?
It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-44850?
Check whether you run github.com/portainer/portainer (Go), Portainer or Portainer Community Edition at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

  • github.com/portainer/portainer (Go): upgrade to 2.33.8 or later
    go get github.com/portainer/portainer@v2.33.8

Technical details

An authorization bypass exists in Portainer's container-create proxy due to incomplete inspection of the Docker API request body. While Portainer offers a 'Disable bind mounts for non-administrators' setting, the enforcement logic in 'decorateContainerCreationOperation' only validated the legacy 'HostConfig.Binds' array and failed to check the 'HostConfig.Mounts' array. An authenticated user with container-creation privileges can use the 'Mounts' field to perform bind mounts of any host path. This allows the attacker to read or write sensitive host files (such as SSH keys or the Docker socket) with the privileges of the Docker daemon, typically root. The issue is resolved in versions 2.33.8, 2.39.2, and 2.41.0.

Affected products

  • Portainer Portainer Community Edition 2.33.0 to < 2.33.8, 2.39.0 to < 2.39.2, 2.40.0 to < 2.41.0

Identifiers

  • CVE-2026-44850
  • GHSA-7fw3-x4r2-g7wc
  • GO-2026-5217

Timeline

  • 2026-05-10: advisory: GitHub advisory published by Portainer
  • 2026-05-28: disclosed: CVE published to NVD

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.