Go/github.com/portainer/portainer

Portainer has an endpoint security bypass via Swarm service create/update

Modified: 6/25/2026

Portainer has a bind-mount restriction bypass via HostConfig.Mounts

Modified: 6/25/2026

Portainer CE allows username enumeration through authentication response timing

Modified: 10/1/2026

Portainer improperly uses an encryption algorithm in the AesEncrypt function

Modified: 12/4/2024

Portainer missing authorization on custom template file endpoint, which exposes template content

Modified: 6/25/2026

Portainer: JWT accepted in URL query leaks tokens to logs and referers

Modified: 6/25/2026

Portainer has a path traversal in backup archive extraction that allows arbitrary file write

Modified: 7/7/2026

Portainer's Kubernetes middleware continues after token validation failure, bypassing endpoint authorization

Modified: 6/25/2026

Portainer Has an Arbitrary File Read via Git Symlink Injection in Stack Auto-Update

Modified: 6/25/2026

Portainer missing authorization on Docker plugin endpoints, which allows host RCE

Modified: 6/25/2026

Portainer has Unauthenticated Restore Endpoint that Allows Admin Takeover on Uninitialized Instances

Modified: 9/2/2026

Portainer improperly uses an encryption algorithm in the AesEncrypt function in github.com/portainer/portainer

Modified: 10/9/2024

Portainer has an endpoint security bypass via Swarm service create/update in github.com/portainer/portainer

Modified: 6/25/2026

Portainer has a bind-mount restriction bypass via HostConfig.Mounts in github.com/portainer/portainer

Modified: 6/25/2026

Portainer missing authorization on custom template file endpoint, which exposes template content in github.com/portainer/portainer

Modified: 6/25/2026

Portainer: JWT accepted in URL query leaks tokens to logs and referers in github.com/portainer/portainer

Modified: 6/25/2026

Portainer has a path traversal in backup archive extraction that allows arbitrary file write in github.com/portainer/portainer

Modified: 7/7/2026

Portainer's Kubernetes middleware continues after token validation failure, bypassing endpoint authorization in github.com/portainer/portainer

Modified: 6/25/2026

Portainer Has an Arbitrary File Read via Git Symlink Injection in Stack Auto-Update in github.com/portainer/portainer

Modified: 6/25/2026

Portainer missing authorization on Docker plugin endpoints, which allows host RCE in github.com/portainer/portainer

Modified: 6/25/2026

Portainer has Unauthenticated Restore Endpoint that Allows Admin Takeover on Uninitialized Instances in github.com/portainer/portainer

Modified: 9/2/2026

Portainer CE allows username enumeration through authentication response timing in github.com/portainer/portainer

Modified: 10/1/2026