github.com/portainer/portainer vulnerabilities
CVEs whose affected-version data names the github.com/portainer/portainer package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-55761High· 5.9Portainer has Unauthenticated Restore Endpoint that Allows Admin Takeover on Uninitialized Instances
Portainer has Unauthenticated Restore Endpoint that Allows Admin Takeover on Uninitialized Instances
▾ Twilightportainer · github.com/portainer/portainerEPSS 0.49%via GHSA
CVE-2026-44885Medium· 5.5Portainer has a path traversal in backup archive extraction that allows arbitrary file write
Portainer has a path traversal in backup archive extraction that allows arbitrary file write
▾ Sunlitportainer · github.com/portainer/portainerEPSS 0.61%via OSV
CVE-2024-29296Medium· 5.3PoCPortainer CE allows username enumeration through authentication response timing
Portainer CE allows username enumeration through authentication response timing
▾ Twilightportainer · github.com/portainer/portainerEPSS 1.3%via OSV