VulnAI

EUVD-2026-33007

ID: EUVD-2026-33007

Severity: high

CVSS v4: 8.5 (CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P)

CVSS v3: Not provided

CWE: None listed

Source: ENISA

Description

Insecure default settings of Portainer CE grant regular (non-admin) users privileges that allow host filesystem access and host-level code execution. An authenticated non-administrative user with endpoint access can exploit these settings to read host files or obtain root equivalent access on the host.

Timestamps

References

No references provided.