Servers and applications
CVE-2024-22031
Users who can create Projects can gain access to arbitrary projects
- Severity
- High 8.5
- Published
- 25 Apr 2025
- Last changed
- 16 Oct 2026
- Added to UpHeron
- 3 Nov 2026
- Fixed in
- 2.9.9, 2.10.5, 2.11.1
- Also known as
- GHSA-8h6m-wv39-239m
- Sources
- CVE Program, Project advisories (GitHub)
Description
Rancher users who can create Projects can gain access to arbitrary projects
Affected software
| Software | Affected versions |
|---|---|
RancherServers and applications · cna:suse|rancher |
|
RancherServers and applications · github:rancher/rancher |
|
References
- CVE.org https://www.cve.org/CVERecord?id=CVE-2024-22031
- GitHub Advisory Database https://github.com/advisories/GHSA-8h6m-wv39-239m
- github.com https://github.com/rancher/rancher/security/advisories/GHSA-8h6m-wv39-239m