CyberRota Analysis
AI-GeneratedAn authentication bypass vulnerability in Portainer CE versions prior to 2.44.0 allows low-privileged authenticated users to circumvent Docker proxy authorization checks due to non-canonical URL normalization issues. This flaw enables attackers to manipulate request paths, potentially gaining root-level access to the underlying Docker host. Organizations using affected versions of Docker should prioritize immediate remediation to mitigate the risk of unauthorized access and potential system compromise.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated low-privileged users to bypass Docker proxy authorization checks via non-canonical URL normalization, defeating all authorization middleware. The proxy endpoint fails to normalize request paths before applying access controls, allowing crafted requests to be interpreted differently by the proxy and the authorization layer. Successful exploitation grants the attacker root-level access to the underlying Docker host.