PT-2025-18231 · Rancher · Rancher

Published 2025-04-25 · Updated 2025-05-07 · CVE-2024-22031

Positive Technologies (AI Summary)

CVSS v3.1

8.5

High

Base vector

AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Rancher (affected versions not specified)

Description A privilege escalation issue has been identified. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2024-22031

GHSA-8H6M-WV39-239M

GO-2025-3647

OPENSUSE-SU-2025:15059-1

Affected Products

Rancher

References · 27

• https://osv.dev/vulnerability/openSUSE-SU-2025:15059-1 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2025-3647 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-8h6m-wv39-239m · Vendor Advisory
• https://github.com/rancher/rancher · Note
• https://github.com/rancher/rancher/commit/9c1d1c2bfcba36ae4f06c1fd043eb539ad801d4d · Note
• https://github.com/rancher/rancher/commit/b0be28f86fc556414bd9b323f05b2b4bf8317c2d · Note
• https://github.com/rancher/rancher/commit/7f16b596120dd382ce6e9ed0baf83bc23f633054 · Note
• https://github.com/rancher/rancher/commit/f036e8b6ab726c3abbc03bbf7c8d0d53373c84e5 · Note
• https://github.com/rancher/rancher/security/advisories/GHSA-8h6m-wv39-239m · Note
• https://twitter.com/Dinosn/status/1917447878756204663 · Twitter Post
• https://pkg.go.dev/vuln/GO-2025-3647 · Note
• https://suse.com/security/cve/CVE-2025-4210 · Note
• https://twitter.com/fletch_ai/status/1917851871479488811 · Twitter Post
• https://suse.com/security/cve/CVE-2025-4166 · Note
• https://suse.com/security/cve/CVE-2025-3879 · Note