CVE-2024-22031

Go/github.com/rancher/rancher CVE-2024-22031: high 8.5, EPSS 0.43%

Rancher users who can create Projects can gain access to arbitrary projects

Action: Upgrade github.com/rancher/rancher to 2.9.9 or later.

go get github.com/rancher/rancher@v2.9.9

go get github.com/rancher/rancher@v2.10.5

go get github.com/rancher/rancher@v2.11.1

Affected

Fixed versions

Sources

• osv: GHSA-8h6m-wv39-239m
• https://github.com/rancher/rancher/security/advisories/GHSA-8h6m-wv39-239m
• https://github.com/rancher/rancher/commit/7f16b596120dd382ce6e9ed0baf83bc23f633054
• https://github.com/rancher/rancher/commit/9c1d1c2bfcba36ae4f06c1fd043eb539ad801d4d
• https://github.com/rancher/rancher/commit/b0be28f86fc556414bd9b323f05b2b4bf8317c2d
• https://github.com/rancher/rancher/commit/f036e8b6ab726c3abbc03bbf7c8d0d53373c84e5
• https://github.com/rancher/rancher
• https://pkg.go.dev/vuln/GO-2025-3647

CVE-2024-22031 · published 2025-04-25T15:09:26Z · modified 2026-09-10T03:50:23.677868683Z · JSON

Go/github.com/rancher/rancher CVE-2024-22031: unknown, EPSS 0.43%

Rancher users who can create Projects can gain access to arbitrary projects in github.com/rancher/rancher

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2025-3647
• https://github.com/rancher/rancher/security/advisories/GHSA-8h6m-wv39-239m

CVE-2024-22031 · published 2025-05-05T16:13:00Z · modified 2026-07-02T16:59:30.987717154Z · JSON