# Portainer 2.39.7 — Release 2.39.7 LTS - Product: Portainer (https://whatsnew.fyi/product/portainer) - Vendor: Portainer - Date: 2026-08-27 - Version: 2.39.7 - Original notes: https://github.com/portainer/portainer/releases/tag/2.39.7 - Permalink: https://whatsnew.fyi/product/portainer/releases/2.39.7 What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog. Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'. --- - **security** — Fixed a critical Docker proxy authorization bypass where unrecognised API version prefixes like /v1.47.0/ or /v01.47/ skipped access control entirely, letting non-admin users reach the Docker API directly - **security** — Closed a remaining gap in the CVE-2026-44849 (GHSA-5fxq-qcf3-244w) fix and broadened bind-mount restrictions for non-admin users, now including Compose and Swarm stack deployments ##### Known issues - On Async Edge environments, an invalid update schedule date can be displayed when browsing a snapshot ###### Known issues with Podman support - Podman environments aren't supported by auto-onboarding script - It's not possible to add Podman environments via socket, when running a Portainer server on Docker (and vice versa) - Support for only CentOS 9, Podman 5 rootful ##### Changes - Fixed a critical Docker proxy authorization bypass. Unrecognised API version prefixes like `/v1.47.0/` or `/v01.47/` skipped access control entirely, letting non-admin users reach the Docker API directly - Closed a remaining gap in the CVE-2026-44849 (GHSA-5fxq-qcf3-244w) fix and broadened bind-mount restrictions for non-admin users, now including Compose and Swarm stack deployments ##### Deprecated and removed features **Deprecated features** - None **Removed features** - None