Vulnerability · Published Jun 17, 2025 · Assigned by GitHub_M

CVE-2025-49593Portainer HTTP Headers May Leak to Malicious Container Registries

Medium 6.8

In plain English

A medium-severity information exposure in portainer from portainer. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 34% of all known vulnerabilities).

Severity (CVSS 3.1)6.8Medium

Exploit odds (30 days)0.4%top 65.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. Prior to STS version 2.31.0 and LTS version 2.27.7, if a Portainer administrator can be convinced to register a malicious container registry, or an existing container registry can be taken over, HTTP Headers (including registry authentication credentials or Portainer session tokens) may be leaked to that registry. This issue has been patched in STS version 2.31.0 and LTS version 2.27.7.

Affected products (as reported)

Vendor	Product	Versions
portainer	portainer	< 2.27.7< 2.31.0

Weakness: CWE-200 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

References

https://github.com/portainer/portainer/security/advisories/GHSA-h5jw-8c32-xfv6 x_refsource_CONFIRM
https://github.com/portainer/portainer/commit/384cb53c64af78af8e1ac7ef5b0f91bad530e989 x_refsource_MISC
https://github.com/portainer/portainer/commit/b767dcb27ed253b423facd2e04ef971985950fd3 x_refsource_MISC