CVE-2026-44850

2 advisories.

Go/github.com/portainer/portainer CVE-2026-44850: high 8.5, EPSS 0.30%

Portainer has a bind-mount restriction bypass via HostConfig.Mounts

Action: Upgrade github.com/portainer/portainer to 2.33.8 or later.

go get github.com/portainer/portainer@v2.33.8

go get github.com/portainer/portainer@v2.39.2

go get github.com/portainer/portainer@v2.41.0

Affected

introduced	fixed	last affected
2.33.0	2.33.8	-
2.39.0	2.39.2	-
2.40.0	2.41.0	-

Fixed versions

2.33.8

2.39.2

2.41.0

Sources

CVE-2026-44850 · published 2026-05-14T16:23:45Z · modified 2026-06-25T19:56:14.843796976Z · JSON

Go/github.com/portainer/portainer CVE-2026-44850: unknown, EPSS 0.30%

Portainer has a bind-mount restriction bypass via HostConfig.Mounts in github.com/portainer/portainer

Action: No fix published. Pin and monitor.

Affected

introduced	fixed	last affected
0	-	-

Fixed versions

No fixed version in the source.

Sources

CVE-2026-44850 · published 2026-06-25T18:43:15Z · modified 2026-06-25T19:45:16.783646632Z · JSON