UpHeron
All vulnerabilities

Servers and applications

GHSA-jmr9-98g4-2phv

Non-admin bind-mount restriction bypass via Docker local-driver volumes and automatic Git redeploy (incomplete fix of CVE-2026-44849 and CVE-2026-44850)

Severity
Critical 9.4
Published
8 Oct 2026
Last changed
8 Oct 2026
Added to UpHeron
3 Nov 2026
Fixed in
2.45.2
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
PortainerServers and applications · github:portainer/portainer
  • From 2.39.0 on
  • From 2.40.0 before 2.45.2

References