CVSS 3.1
9.1 criticalCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:HCVE-2024-22036
Critical (9.1). EPSS 0.8% chance of exploitation in the next 30 days. Fixed in github.com/rancher/rancher 2.7.16, 2.8.9, 2.9.3.
A vulnerability has been identified within Rancher where a cluster or node driver can be used to escape the chroot
jail and gain root access to the Rancher container itself. In
production environments, further privilege escalation is possible based
on living off the land within the Rancher container itself. For the test
and development environments, based on a –privileged Docker container,
it is possible to escape the Docker container and gain execution access
on the host system.
This issue affects rancher: from 2.7.0 before 2.7.16, from 2.8.0 before 2.8.9, from 2.9.0 before 2.9.3.
Severity
- EPSS
- 0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-10-31)
- CWE
- CWE-269
- Published
- Modified
- Record from
- the NVD, synced
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-h99m-6755-rgwc | Go | github.com/rancher/rancher | >=2.7.0 <2.7.16 | 2.7.16 |
| GHSA-h99m-6755-rgwc | Go | github.com/rancher/rancher | >=2.8.0 <2.8.9 | 2.8.9 |
| GHSA-h99m-6755-rgwc | Go | github.com/rancher/rancher | >=2.9.0 <2.9.3 | 2.9.3 |
| GO-2024-3221 | Go | github.com/rancher/rancher | all versions | no fix published |