All vulnerabilities

Servers and applications

CVE-2024-22036

Rancher Remote Code Execution via Cluster/Node Drivers

Severity
Critical 9.1
Published
25 Oct 2024
Last changed
25 Oct 2024
Added to UpHeron
3 Nov 2026
Fixed in
2.7.16, 2.8.9, 2.9.3
Also known as
GHSA-h99m-6755-rgwc
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
RancherServers and applications · github:rancher/rancher
  • From 2.7.0 before 2.7.16
  • From 2.8.0 before 2.8.9
  • From 2.9.0 before 2.9.3

References