VULNERABILITY INTELLIGENCE
CVE-2026-33590
EPSS probability0.45%
CISA KEVNot currently listed
Published2026-05-28
Last modified2026-10-26
Description
Insecure default settings of Portainer CE grant regular (non-admin) users privileges that allow host filesystem access and host-level code execution. An authenticated non-administrative user with endpoint access can exploit these settings to read host files or obtain root equivalent access on the host.
Weakness classification
- a6d3dc9e-0591-4a13-bce7-0f5b31ff6158: CWE-276