The vulnerability arises from insecure default permissions in Portainer Community Edition. A non‑administrator user who can authenticate to an endpoint inherits privileges that enable reading of host files and executing code at host level. Because the flaw is tied to the way the application sets file and directory permissions, an attacker who gains such user access can bypass normal isolation boundaries. This flaw falls under CWE‑276, representing insecure permission assignments that can lead to privilege escalation.

Portainer Community Edition is affected. Specific version details are not disclosed in the advisory, so any installation that includes the default configuration before the security fixes referenced in the commit logs could be vulnerable.

The CVSS score of 8.5 indicates a high severity vulnerability. The EPSS score is not available, and the issue has not been listed in CISA’s KEV catalog. An attacker needs to be authenticated as a non‑admin user with endpoint access; from that position, the flaw can be leveraged to read host files or run code with elevated privileges. The attack vector appears to be local or authenticated, and the vulnerability can be exploited without requiring network exposure beyond the scope of the Portainer instance.