Skip to content
NewA calmer, faster ZeroHour
Toolslow

Metasploit adds authenticated Portainer Docker API root RCE

Original title: Land #21745, adds authenticated Docker API root RCE

Metasploit Framework commitsby msutovsky-r7 ()1
Read at github.com
Part of a story covered by 2 sourcesMetasploit adds auxiliary module for Flowise auth bypass CVE-2025-58434Merged summary & timeline
AI summary · x-ai/grok-4.7Summaries by Vani AI

The new module targets an authenticated Docker API path; the commit names no CVE or affected versions.

A Metasploit Framework commit lands module #21745 for authenticated root remote code execution through the Docker API via Portainer. The feed snippet gives no CVE, version range, patch, or report of real-world use.

Unconfirmed: Only a commit title is available, so the flaw’s versions and prior disclosure status are unknown.

Key facts
  • The change is described as adding Portainer authenticated Docker API root RCE.
  • No fixed version or exploitation status appears in the snippet.
Security assessment · AI, from the articlePublic proof of concept

Impact: Authenticated remote code execution as root via Docker API

ProductAffected
Portainer—
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat
Tags
metasploitportainerdockerrceauthenticated
Vendors
Portainer
Products
Metasploit Framework
Organizations
Rapid7

From the original article

Land #21745, adds authenticated Docker API root RCE Add Portainer authenticated Docker API root RCE

Metasploit Framework commits

By msutovsky-r7 · github.com

Read the full article at Metasploit Framework commits

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.