VULNERABILITY INTELLIGENCE

CVE-2020-24264

CVSS score9.8 CRITICAL
EPSS probability4.12%
CISA KEVNot currently listed
Published2021-03-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Portainer 1.24.1 and earlier is affected by incorrect access control that may lead to remote arbitrary code execution. The restriction checks for bind mounts are applied only on the client-side and not the server-side, which can lead to spawning a container with bind mount. Once such a container is spawned, it can be leveraged to break out of the container leading to complete Docker host machine takeover.

Weakness classification

  • nvd@nist.gov: CWE-863

Primary references