A vulnerability, which was classified as critical, has been found in portainer Community Edition up to 2.33.7. This impacts an unknown function of the file api/archive/targz.go. This manipulation causes path traversal.
This vulnerability appears as CVE-2026-44885. The attack may be initiated remotely. There is no available exploit.
It is advisable to upgrade the affected component.
