Skip to content
OpenAdvisories
High WID-SEC-2026-2266 6 CVEs

rclone: Mehrere Schwachstellen

Published Jul 8, 2026 · Updated Aug 25, 2026 · Revision 5 · de-DE

Vendor: amazon Vendor: SUSE Product: Linux 2 Product: openSUSE Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in rclone ausnutzen, um beliebige Dateien zu lesen und zu schreiben, sowie Informationen offenzulegen und Sicherheitsmechanismen zu umgehen.

Product

Rclone ist ein Open-Source-Befehlszeilenprogramm zur Synchronisierung von Dateien und Verzeichnissen mit verschiedenen Cloud-Speicherdiensten.

Vulnerabilities 6

  • High 8.8
    CVE-2026-59733

    rclone `serve restic --private-repos` authorization bypass: `..` in the URL path lets an authenticated user read, overwrite and delete other users' repositories

    Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.74.4, rclone serve restic --private-repos enforces authorization using the routed user path segment while building the backend object key …

    rclone rclone telegraf-1.38 rclone Debian Ubuntu Wolfi Go
  • High 7.5
    CVE-2026-54572

    rclone: Unvalidated symlink target in local `--links` — arbitrary file write from an untrusted remote

    Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.74.4, with -l/--links, rclone serializes symlinks as .rclonelink text objects and recreates them on a local destination without validating…

    rclone rclone telegraf-1.38 rclone Debian Ubuntu Wolfi Go
  • Medium 6.5
    CVE-2026-79781

    rclone serve s3 Path Traversal via dot-dot object keys

    rclone serve s3 before 1.74.4 contains a path traversal vulnerability that allows attackers to read and overwrite root-level files by using dot-dot segments in S3 object keys. Attackers can send requests with object keys like ../root-secret.txt to escape the …

    rclone rclone rclone rclone Debian Ubuntu Go
  • Medium 5.0
    CVE-2026-59732

    rclone archive extract allows S3 destination prefix escape via crafted archive paths

    Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.74.4, rclone archive extract can write extracted files outside the user-selected destination prefix when extracting a crafted archive cont…

    rclone rclone telegraf-1.38 rclone Debian Ubuntu Wolfi Go
  • Low 3.6
    CVE-2026-79783

    rclone before 1.74.4 Privilege Escalation via setuid Metadata

    rclone before 1.74.4 fails to mask special permission bits when applying source-supplied mode metadata in the local backend, allowing attackers to set setuid/setgid bits on attacker-controlled files. When copying with metadata preservation from an untrusted r…

    rclone rclone rclone rclone Debian Ubuntu Go
  • Low 3.1
    CVE-2026-79782

    rclone before 1.74.4 Security Token Disclosure via HTTPS to HTTP Redirect

    rclone before 1.74.4 fails to strip the X-Amz-Security-Token header when an S3 redirect changes scheme from HTTPS to HTTP on the same host. Attackers can intercept plaintext HTTP traffic to capture AWS STS session tokens sent in request headers.

    rclone rclone rclone rclone Debian Ubuntu Go

Revision history

  1. #5

    Referenz(en) aufgenommen: CVE-2026-79781, EUVD-2026-65539, CVE-2026-79782, EUVD-2026-65540, CVE-2026-79783, EUVD-2026-65541

  2. #4

    Neue Updates von Amazon aufgenommen

  3. #3

    Referenz(en) aufgenommen: EUVD-2026-44533, EUVD-2026-44532, EUVD-2026-44530

  4. #2

    Neue Updates von openSUSE aufgenommen

  5. #1

    Initiale Fassung

References