CVE-2024-22031: Rancher users who can create Projects can gain access to arbitrary projects

Severity: high (CVSS 8.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-10-15 · updated 2026-10-27
Weakness: CWE-863

Description

A vulnerability has been identified within Rancher where a user with the ability to create a project, on a certain cluster, can create a project with the same name as an existing project in a different cluster. This results in the user gaining access to the other project in the different cluster, resulting in a privilege escalation. This happens because the namespace used on the local cluster to store related resources (PRTBs and secrets) is the name of the project.

Affected products

SUSE Rancher: from 2.8.0 before 2.9.9; from 2.10.0 before 2.10.5; from 2.11.0 before 2.11.1 — fixed in 2.10.5, 2.11.1, 2.9.9

How to fix

Upgrade to a fixed version: SUSE Rancher 2.10.5, 2.11.1, 2.9.9. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2024-22031 or the next vulnerability affects your stack