A vulnerability classified as critical has been found in portainer Community Edition up to 2.33.7/2.39.1/2.40.x. The impacted element is an unknown function of the component Docker Swarm Service API. The manipulation leads to missing authorization.
This vulnerability is documented as CVE-2026-44849. The attack can be initiated remotely. There is not any exploit available.
It is recommended to upgrade the affected component.
