Skip to content
OpenAdvisories
High WID-SEC-2026-1179 2 CVEs

rclone: Mehrere Schwachstellen

Published Apr 19, 2026 · Updated May 14, 2026 · Revision 4 · de-DE

Vendor: amazon Vendor: SUSE Product: Linux 2 Product: openSUSE Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in rclone ausnutzen, um Sicherheitsvorkehrungen zu umgehen und beliebigen Programmcode auszuführen.

Product

Rclone ist ein Open-Source-Befehlszeilenprogramm zur Synchronisierung von Dateien und Verzeichnissen mit verschiedenen Cloud-Speicherdiensten.

Vulnerabilities 2

  • Critical 9.2
    CVE-2026-41176 Scanner template EPSS 33%

    Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution

    Rclone is a command-line program to sync files and directories to and from different cloud storage providers. The RC endpoint `options/set` is exposed without `AuthRequired: true`, but it can mutate global runtime configuration, including the RC option block …

    rclone rclone telegraf-1.38 rclone Debian Ubuntu Wolfi Go
  • Critical 9.2
    CVE-2026-41179 Public exploit Scanner template

    RClone: Unauthenticated operations/fsinfo allows attacker-controlled backend instantiation and local command execution

    Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Starting in version 1.48.0 and prior to version 1.73.5, the RC endpoint `operations/fsinfo` is exposed without `AuthRequired: true` and accepts attac…

    rclone rclone telegraf-1.38 rclone Debian Ubuntu Alpine Wolfi Go

Revision history

  1. #4

    Neue Updates von Amazon aufgenommen

  2. #3

    Neue Updates von openSUSE aufgenommen

  3. #2

    Referenz(en) aufgenommen: EUVD-2026-25144, EUVD-2026-25142

  4. #1

    Initiale Fassung

References