← All advisories

Critical severity9.8NVD Advisory· Published Feb 11, 2022· Updated Jun 17, 2026

CVE-2022-24961

CVE-2022-24961

Description

In Portainer Agent before 2.11.1, an API server can continue running even if not associated with a Portainer instance in the past few days.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Portainer/Portainercpe-rescue3 versions
(expand)+ 2 more
- (no CPE)
- cpe:2.3:a:portainer:portainer:*:*:*:*:*:*:*:*range: <2.11.1
- (no CPE)range: <2.11.1

Patches

Vulnerability mechanics

References

4

github.com/portainer/agent/compare/2.11.0...2.11.1nvdPatchThird Party Advisory
github.com/portainer/agent/pull/225/commits/a66977c76043fcff4a8f69c4b65988272d27c01fnvdPatchThird Party Advisory
github.com/portainer/portainer/issues/6420nvdIssue TrackingThird Party Advisory
www.portainer.io/blog/should-you-expose-portainer-or-agent-to-the-internetnvdVendor Advisory

News mentions

0

No linked articles in our index yet.