Portainer Edge Agent endpoints do not validate EdgeStack assignment, allowing unauthorized reads of unassigned stack files and forged status reports

Portainer Edge Agent Endpoint EdgeStack Assignment Authorization Bypass Vulnerability Overview Two categories of Portainer Server endpoints serving Edge Agents -- Edge Stack deployment-file retrieval and deployment status reporting -- resolve the reporting environment from the Edge ID in the...

Buoyant Edge security vulnerability

Buoyant Edge is a Linkerd lightweight edge agent from Buoyant. A security vulnerability exists in Buoyant Edge versions prior to 25.2.1, which stems from the fact that metric data may consume a large amount of agent memory, leading to resource exhaustion...