CVE-2026-44884 Portainer: Missing authorization on custom template file endpoint exposes template content

🗓️ 28 May 2026 20:58:36Reported by GoogleType

osv🔗 osv.dev👁 1 Views

Portainer missing authorization on custom template file endpoint allowed reading template content by ID; fixed in 2.33.8 and 2.39.1.

Reporter	Title	Published	Views	Family All 15
ATTACKERKB	CVE-2026-44884	28 May 202620:58	–	attackerkb
BDU FSTEC	The vulnerability of the Portainer container management platform’s customTemplateFile() function allows a hacker to gain unauthorized access to protected information.	2 Jul 202600:00	–	bdu_fstec
CNNVD	Portainer 安全漏洞	28 May 202600:00	–	cnnvd
CVE	CVE-2026-44884	28 May 202620:58	–	cve
Cvelist	CVE-2026-44884 Portainer: Missing authorization on custom template file endpoint exposes template content	28 May 202620:58	–	cvelist
EUVD	EUVD-2026-33058	28 May 202620:58	–	euvd
Github Security Blog	Portainer missing authorization on custom template file endpoint, which exposes template content	14 May 202616:34	–	github
NVD	CVE-2026-44884	28 May 202622:16	–	nvd
OSV	GHSA-CQPQ-2FGR-8MVC Portainer missing authorization on custom template file endpoint, which exposes template content	14 May 202616:34	–	osv
OSV	GO-2026-5333 Portainer missing authorization on custom template file endpoint, which exposes template content in github.com/portainer/portainer	25 Jun 202618:43	–	osv

Source	Link
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44884.json
github	www.github.com/portainer/portainer/security/advisories/GHSA-cqpq-2fgr-8mvc
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-44884

08 Jul 2026 08:13Current

6.6Medium risk

Vulners AI Score6.6

CVSS 46

EPSS0.00257