# CVE-2026-44850: Portainer Community Edition authorization bypass in bind-mount restriction

Source: https://junglewise.ai/threats/cve-2026-44850-portainer-community-edition-authorization-bypass-in-bind-mount  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-05-28. Updated: 2026-05-28  
License: CC BY 4.0 with a link back

CVE-2026-44850 · Severity: high · CVSS 8.5 · Published 2026-05-28

Portainer is a management platform used to run and monitor containerized applications like Docker and Kubernetes. A security flaw allowed standard users to bypass restrictions intended to prevent them from accessing the underlying server's file system. By exploiting this, an authorized user could gain full access to sensitive files on the host server, potentially leading to a total compromise of the infrastructure and all other applications running on it.

Technologies: [github.com/portainer/portainer (Go)](https://junglewise.ai/threats/technologies/github-com-portainer-portainer), [Portainer](https://junglewise.ai/threats/technologies/portainer), [Portainer Community Edition](https://junglewise.ai/threats/technologies/portainer-community-edition). Vendors: [Go](https://junglewise.ai/threats/vendors/go), [Portainer](https://junglewise.ai/threats/vendors/portainer).

## Quick answers

**Is CVE-2026-44850 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-44850 being exploited in the wild.

**How severe is CVE-2026-44850?** High severity, with a CVSS score of 8.5, published 28 May 2026.

**Which products and versions are affected?** github.com/portainer/portainer (Go) SEMVER:introduced=0, SEMVER:introduced=2.33.0,fixed=2.33.8; Portainer >= 2.33.0, < 2.33.8; >= 2.39.0, < 2.39.2; >= 2.40.0, < 2.41.0; Portainer Community Edition 2.33.0 to < 2.33.8, 2.39.0 to < 2.39.2, 2.40.0 to < 2.41.0.

**Is there a fix for CVE-2026-44850?** Yes. github.com/portainer/portainer (Go): upgrade to 2.33.8 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-44850 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-44850?** Check whether you run github.com/portainer/portainer (Go), Portainer or Portainer Community Edition at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- github.com/portainer/portainer (Go): upgrade to 2.33.8 or later

  ```sh
  go get github.com/portainer/portainer@v2.33.8
  ```


## Technical details

An authorization bypass exists in Portainer's container-create proxy due to incomplete inspection of the Docker API request body. While Portainer offers a 'Disable bind mounts for non-administrators' setting, the enforcement logic in 'decorateContainerCreationOperation' only validated the legacy 'HostConfig.Binds' array and failed to check the 'HostConfig.Mounts' array. An authenticated user with container-creation privileges can use the 'Mounts' field to perform bind mounts of any host path. This allows the attacker to read or write sensitive host files (such as SSH keys or the Docker socket) with the privileges of the Docker daemon, typically root. The issue is resolved in versions 2.33.8, 2.39.2, and 2.41.0.

## Affected products

- Portainer Portainer Community Edition 2.33.0 to < 2.33.8, 2.39.0 to < 2.39.2, 2.40.0 to < 2.41.0

## Identifiers

- CVE-2026-44850
- GHSA-7fw3-x4r2-g7wc
- GO-2026-5217

## Timeline

- 2026-05-10: advisory: GitHub advisory published by Portainer
- 2026-05-28: disclosed: CVE published to NVD

## References

- [https://github.com/portainer/portainer/security/advisories/GHSA-7fw3-x4r2-g7wc](https://github.com/portainer/portainer/security/advisories/GHSA-7fw3-x4r2-g7wc)

## Related threats

- [Portainer Community Edition improper authentication in setup endpoints](https://junglewise.ai/threats/cve-2026-55761-portainer-community-edition-improper-authentication-in-setup)
- [Portainer Community Edition directory traversal in backup restore](https://junglewise.ai/threats/cve-2026-44885-portainer-community-edition-directory-traversal-in-backup-restore)
- [Portainer Community Edition missing authorization in custom template endpoint](https://junglewise.ai/threats/cve-2026-44884-portainer-community-edition-missing-authorization-in-custom)
- [Portainer Community Edition sensitive token leakage via URL query parameter](https://junglewise.ai/threats/cve-2026-44883-portainer-community-edition-sensitive-token-leakage-via-url-query)
- [Portainer authorization bypass in Kubernetes middleware](https://junglewise.ai/threats/cve-2026-44882-portainer-authorization-bypass-in-kubernetes-middleware)