Portainer CE (2.39.0 <= v < 2.39.4, < 2.43.0)

An authentication bypass vulnerability in Portainer allows unauthenticated attackers to hijack uninitialized instances via the /api/restore and /api/users/admin/init endpoints.