CVE-2026-44881_exploit

CVE-2026-44881 — Portainer Git Symlink → मनमाना होस्ट फ़ाइल पढ़ना CVE-2026-44881 के लिए एकल-स्क्रिप्ट शोषण, Portainer के स्टैक-तैनाती प्रवाह में एक Git सिमलिंक इंजेक्शन जो किसी भी निम्न-विशेषाधिकार प्रमाणित उपयोगकर्ता को स्टैक-निर्माण अधिकारों के साथ Portainer प्रक्रिया द्वारा पहुंच योग्य मनमानी...

CVE-2026-11876

In zenml-io/zenml version 0.94.2, the GET /api/v1/stack-deployment/stack endpoint getdeployedstack lacks proper RBAC authorization checks, allowing any authenticated user to enumerate all deployed stacks across all users and tenants. This includes stack component details, service connector...

CVE-2026-44881 Portainer: Arbitrary File Read via Git Symlink Injection in Stack Auto-Update

Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before 2.33.8, 2.39.2, and 2.41.0, Portainer supports deploying stacks from Git repositories. When a...