9.4

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-44848

CVE-2026-44848: Portainer: Missing authorization on Docker plugin endpoints allows host RCE

Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before 2.33.8, 2.39.2, and 2.41.0, The Docker plugin management endpoints (/plugins/*) were not registered with a handler, so standard users with endpoint access could call privileged plugin operations — including installing and enabling plugins — directly against the underlying Docker daemon. The vulnerability is exposed when a non-admin Portainer user (Standard User role, or any role granted endpoint-level access) has been given access to a Docker endpoint via Portainer RBAC. This vulnerability is fixed in 2.33.8, 2.39.2, and 2.41.0.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-44848

CVE-2026-44848:

9.4

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

SSVC / BOD 26-04 ↗

Exploitation pocAutomatable NoTech Impact Total

Select your environment

→SSVCScheduled60 days

Runtime reachability resolves your actual outcome.Book a demo

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
github.com/portainer/portainer	go	>= 2.33.0, < 2.33.8	2.33.8
github.com/portainer/portainer	go	>= 2.39.0, < 2.39.2	2.39.2
github.com/portainer/portainer	go	>= 2.40.0, < 2.41.0	2.41.0

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability exists in the Docker API proxy layer of Portainer, specifically within the ProxyDockerRequest function located in api/http/proxy/factory/docker/transport.go. This function is intended to enforce Role-Based Access Control (RBAC) by routing requests through authorization handlers based on the URL prefix.

The vulnerability arises because the prefixProxyFuncMap, which maps URL prefixes to their respective handlers, did not include an entry for /plugins. Consequently, any API requests targeting Docker plugin management endpoints (e.g., /plugins/pull, /plugins/{name}/enable) would not match any entry in the map.

In the vulnerable code, this lack of a match caused the function to fall through to a final transport.executeDockerRequest(request) call. This call directly forwards the request to the underlying Docker daemon without performing any of Portainer's authorization checks. This allowed any authenticated user with access to a Docker endpoint, regardless of their role, to execute privileged plugin operations.

The patch for this vulnerability, found in commit 6024a978924c3aa99cbbbc9ffdfe94c3fd56cd10, addresses this by introducing a new check. It adds a function isAdminOnlyRoute that uses regular expressions to identify requests to sensitive plugin endpoints. Before falling through to the unauthorized executeDockerRequest, the ProxyDockerRequest function now checks if the request is an admin-only route and, if so, passes it to transport.administratorOperation(request), which correctly enforces administrator-only permissions. The primary vulnerable function is Transport.ProxyDockerRequest because it contains the flawed logic that fails to enforce authorization.

Vulnerable functions

Transport.ProxyDockerRequest

api/http/proxy/factory/docker/transport.go

The `ProxyDockerRequest` function in the `Transport` struct is responsible for proxying Docker API requests. In the vulnerable version, it checked for a limited set of API prefixes in `prefixProxyFuncMap`. If a request's prefix, such as `/plugins`, was not found in the map, the function would fall through and call `executeDockerRequest`, which forwards the request to the Docker daemon without any authorization checks. This allowed a non-administrative user to perform privileged actions like installing and enabling Docker plugins, leading to remote code execution on the host.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.