Chroot Escape Vulnerability in Rancher by SUSE

CVE-2024-22036

Summary

A vulnerability exists in Rancher that allows a cluster or node driver to bypass the chroot jail, potentially granting root access to the Rancher container. In production setups, this may lead to further privilege escalation within the Rancher environment, affecting resource integrity. In test and development settings using a privileged Docker container, attackers can escape their containment and execute commands on the host system, thereby compromising its security.

References