---
cve: "CVE-2024-22036"
severity: "CRITICAL"
cvss: 9.1
epss: "0.8%"
vendor: "SUSE"
kev: false
exploited: false
published: "2025-04-16 09:15:27"
tags: [cve, security, critical]
source: tsecurity.de CVE-Dossier
exported: "2026-09-21T12:24:02+02:00"
---

# CVE-2024-22036

> 9.1 CRITICAL · 🧪 PoC

## Beschreibung

A vulnerability has been identified within Rancher where a cluster or node driver can be used to escape the chroot
 jail and gain root access to the Rancher container itself. In 
production environments, further privilege escalation is possible based 
on living off the land within the Rancher container itself. For the test
 and development environments, based on a –privileged Docker container, 
it is possible to escape the Docker container and gain execution access 
on the host system.


This issue affects rancher: from 2.7.0 before 2.7.16, from 2.8.0 before 2.8.9, from 2.9.0 before 2.9.3.

## CVSS-Vektor

```
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Netzwerk | bad |
| AC Komplexität | Gering | bad |
| PR Privilegien | Hoch | good |
| UI Interaktion | Keine | bad |
| S Scope | Verändert | bad |
| C Vertraulichkeit | Hoch | bad |
| I Integrität | Hoch | bad |
| A Verfügbarkeit | Hoch | bad |

## Patch verfügbar (OSV)

- d6bfc4c47342721332a961dbe2943a7a349bf03d (Commit)
- d619f78675f4f071554afeb97716fb2090e895d7 (Commit)

## Referenzen

- <https://bugzilla.suse.com/show_bug.cgi?id=CVE-2024-22036>
- <https://github.com/rancher/rancher/security/advisories/GHSA-h99m-6755-rgwc>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2024-22036) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_