CVE-2026-44849

Go/github.com/portainer/portainer CVE-2026-44849: high 8.8

Portainer has an endpoint security bypass via Swarm service create/update

Action: Upgrade github.com/portainer/portainer to 2.33.8 or later.

go get github.com/portainer/portainer@v2.33.8

go get github.com/portainer/portainer@v2.39.2

go get github.com/portainer/portainer@v2.41.0

Affected

Fixed versions

Sources

• osv: GHSA-5fxq-qcf3-244w
• https://github.com/portainer/portainer/security/advisories/GHSA-5fxq-qcf3-244w
• https://nvd.nist.gov/vuln/detail/CVE-2026-44849
• https://github.com/portainer/portainer
• https://github.com/portainer/portainer/releases/tag/2.33.8
• https://github.com/portainer/portainer/releases/tag/2.39.2
• https://github.com/portainer/portainer/releases/tag/2.41.0

CVE-2026-44849 · published 2026-05-14T16:33:42Z · modified 2026-06-25T18:56:19.453833953Z · JSON

Go/github.com/portainer/portainer CVE-2026-44849: unknown

Portainer has an endpoint security bypass via Swarm service create/update in github.com/portainer/portainer

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-5143
• https://github.com/portainer/portainer/security/advisories/GHSA-5fxq-qcf3-244w
• https://nvd.nist.gov/vuln/detail/CVE-2026-44849
• https://github.com/portainer/portainer/releases/tag/2.33.8
• https://github.com/portainer/portainer/releases/tag/2.39.2
• https://github.com/portainer/portainer/releases/tag/2.41.0

CVE-2026-44849 · published 2026-06-25T18:26:48Z · modified 2026-06-25T18:45:25.280432699Z · JSON