Lucene search
K

CVE-2026-44850 Portainer: Bind-mount restriction bypass via HostConfig.Mounts

๐Ÿ—“๏ธย 28 May 2026ย 21:03:16Reported byย GitHub_MTypeย 
cvelist
ย cvelist
๐Ÿ”—ย www.cve.org๐Ÿ‘ย 26ย Views

Portainer allowed non-admins to mount host paths via HostConfig.Mounts due to incomplete checks in specific versions.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2026-44850
28 May 202621:03
โ€“attackerkb
Circl
CVE-2026-44850
28 May 202623:00
โ€“circl
CNNVD
Portainer ๅฎ‰ๅ…จๆผๆดž
28 May 202600:00
โ€“cnnvd
CVE
CVE-2026-44850
28 May 202621:03
โ€“cve
EUVD
EUVD-2026-33062
28 May 202621:03
โ€“euvd
Github Security Blog
Portainer has a bind-mount restriction bypass via HostConfig.Mounts
14 May 202616:23
โ€“github
NVD
CVE-2026-44850
28 May 202622:16
โ€“nvd
OSV
GHSA-7FW3-X4R2-G7WC Portainer has a bind-mount restriction bypass via HostConfig.Mounts
14 May 202616:23
โ€“osv
Positive Technologies
PT-2026-41140
14 May 202600:00
โ€“ptsecurity
RedhatCVE
CVE-2026-44850
5 Jun 202619:12
โ€“redhatcve
Rows per page
[
  {
    "vendor": "portainer",
    "product": "portainer",
    "versions": [
      {
        "version": ">= 2.33.0, < 2.33.8",
        "status": "affected"
      },
      {
        "version": ">= 2.39.0, < 2.39.2",
        "status": "affected"
      },
      {
        "version": ">= 2.40.0, < 2.41.0",
        "status": "affected"
      }
    ]
  }
]

Data

Build on a solid foundation withย Vulners data

Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data

Api

Power your application withย Vulners API

The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access

App

Assess and manage vulnerabilities withย Vulnersย tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation