CVE-2026-44885 | portainer Community Edition up to 2.33.7 api/archive/targz.go path traversal (GHSA-m8fg-67j7-cx4v)

A vulnerability, which was classified as critical, has been found in portainer Community Edition up to 2.33.7. This impacts an unknown function of the file api/archive/targz.go. This manipulation causes path traversal.

This vulnerability appears as CVE-2026-44885. The attack may be initiated remotely. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More