Vulnpedia
← All CVEs

CVE-2024-22031

HIGH 8.5 ALL-YEARS

Published 2026-10-15 · Last modified 2026-10-16 · suse · NVD: Awaiting Analysis

A vulnerability has been identified within Rancher where a user with the ability to create a project, on a certain cluster, can create a project with the same name as an existing project in a different cluster. This results in the user gaining access to the other project in the different cluster, resulting in a privilege escalation. This happens because the namespace used on the local cluster to store related resources (PRTBs and secrets) is the name of the project.

ELEVATED IMPACT

Severe if exploited (CVSS 8.5), but no confirmed exploitation. Patch on a normal cadence.

Exploitation likelihood

0.4%chance of exploitation in 30 days · 37th percentile

○ In CISA KEV○ Catalogued PoC◆ SSVC: exploitation none, automatable no

Impact if exploited

8.5CVSS 3.1 · HIGH · CNA

  • ConfidentialityHigh
  • IntegrityHigh
  • AvailabilityHigh

What an attacker needs

  • ✓Access: Reachable over the network — no local access needed
  • ⚠Privileges: Requires a low-privilege account
  • ✓User interaction: No user interaction needed
  • ⚠Complexity: Needs a race window or specific setup

✓ lowers the bar for an attacker · ⚠ raises it

Proof of concept

No public PoC is currently catalogued.

Search for new PoCs

Search GitHub now — results may be empty or unverified.

Tracked sources are checked weekly for the full archive, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.

Affected

Vendors Suse

Products Rancher

Weakness (CWE)

  • CWE-863: : Incorrect authorization

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

References and research data (JSON)

Packages and version ranges

Each advisory describes its own package and affected ranges. A boundary applies to that range; it is not a universal upgrade recommendation.

  • github.com/rancher/rancher Go

    pkg:golang/github.com/rancher/rancher

    SEMVER range
    • Introduced version (included): 2.8.0
    • Fixed boundary (excluded): 2.9.9
    Additional upstream package constraints
    {
  "database": {
    "source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/04/GHSA-8h6m-wv39-239m/GHSA-8h6m-wv39-239m.json"
  }
}
    GitHub Advisory Database · GHSA-8h6m-wv39-239m · Updated 2026-09-10T03:50:23.677868683Z
  • github.com/rancher/rancher Go

    pkg:golang/github.com/rancher/rancher

    SEMVER range
    • Introduced version (included): 2.10.0
    • Fixed boundary (excluded): 2.10.5
    Additional upstream package constraints
    {
  "database": {
    "source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/04/GHSA-8h6m-wv39-239m/GHSA-8h6m-wv39-239m.json"
  }
}
    GitHub Advisory Database · GHSA-8h6m-wv39-239m · Updated 2026-09-10T03:50:23.677868683Z
  • github.com/rancher/rancher Go

    pkg:golang/github.com/rancher/rancher

    SEMVER range
    • Introduced version (included): 2.11.0
    • Fixed boundary (excluded): 2.11.1
    Additional upstream package constraints
    {
  "database": {
    "source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/04/GHSA-8h6m-wv39-239m/GHSA-8h6m-wv39-239m.json"
  }
}
    GitHub Advisory Database · GHSA-8h6m-wv39-239m · Updated 2026-09-10T03:50:23.677868683Z
  • github.com/rancher/rancher Go

    pkg:golang/github.com/rancher/rancher

    SEMVER range
    • All earlier versions (introduced 0)
    Additional upstream package constraints
    {
  "ecosystem": {
    "custom_ranges": [
      {
        "events": [
          {
            "introduced": "2.8.0"
          },
          {
            "fixed": "2.9.9"
          },
          {
            "introduced": "2.10.0"
          },
          {
            "fixed": "2.10.5"
          },
          {
            "introduced": "2.11.0"
          },
          {
            "fixed": "2.11.1"
          }
        ],
        "type": "ECOSYSTEM"
      }
    ]
  },
  "database": {
    "source": "https://vuln.go.dev/ID/GO-2025-3647.json"
  }
}
    Go Vulnerability Database · GO-2025-3647 · Updated 2026-07-02T16:59:30.987717154Z

All CVSS metrics

  • HIGH 8.5 v3.1 · CNA Primary
    CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
  • HIGH 8.5 v3.1 · NVD Secondary
    CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

References

Advisories

Technical & other

Sources: NVD · CVE.org · All sources and attribution · EPSS