tocsin

Go/github.com/portainer/portainer CVE-2026-44849: high 8.8, EPSS 0.45%

Portainer has an endpoint security bypass via Swarm service create/update

Action: Upgrade github.com/portainer/portainer to 2.33.8 or later.

go get github.com/portainer/portainer@v2.33.8
go get github.com/portainer/portainer@v2.39.2
go get github.com/portainer/portainer@v2.41.0

Affected

introducedfixedlast affected
2.33.02.33.8-
2.39.02.39.2-
2.40.02.41.0-

Fixed versions

2.33.82.39.22.41.0

Sources

CVE-2026-44849 · published · modified · JSON