Security Advisory
CVE-2026-33590
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Insecure default settings of Portainer CE grant regular (non-admin) users privileges that allow host filesystem access and host-level code execution. An authenticated non-administrative user with endpoint access can exploit these settings to read host files or obtain root equivalent access on the host.