CVE-2022-24961: Portainer

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

In Portainer Agent before 2.11.1, an API server can continue running even if not associated with a Portainer instance in the past few days.

Affected products

• Portainer Portainer: before 2.11.1 (fixed in 2.11.1)

Published 2022-02-11. Last modified 2026-06-17.