CVE-2026-33590 — Insecure default permissions in Portainer CE
Insecure default settings of Portainer CE grant regular (non-admin) users privileges that allow host filesystem access and host-level code execution. An authenticated non-admini…
Published: 2026-05-28 · CVSS: 8.5 · CVSS 4.0
Insecure default settings of Portainer CE grant regular (non-admin) users privileges that allow host filesystem access and host-level code execution. An authenticated non-administrative user with endpoint access can exploit these settings to read host files or obtain root equivalent access on the host.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7