Insecure Default Settings in Portainer CE Grant Unprivileged User Privileges

CVE-2026-33590

What is CVE-2026-33590?

The security configuration of Portainer CE has been identified to have insecure default settings that unintentionally elevate privileges of regular users. Users with authenticated access but without administrative rights can exploit these vulnerabilities to gain unauthorized access to the host filesystem, enabling them to read sensitive files and, in some instances, execute code with root-level equivalence. This can pose significant risks to the integrity and confidentiality of the host system, allowing potential attackers to manipulate system files or compromise applications running in the environment.

References