Skip to content
OpenAdvisories
High WID-SEC-2026-4156 10 CVEs

rclone: Mehrere Schwachstellen

Published Oct 25, 2026 · Updated Nov 9, 2026 · Revision 2 · de

Vendor: amazon Product: Linux 2 Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in rclone ausnutzen, um Sicherheitsvorkehrungen zu umgehen, vertrauliche Informationen auszulesen, Daten zu manipulieren oder einen Denial-of-Service-Angriff durchzuführen.

Product

Rclone ist ein Open-Source-Befehlszeilenprogramm zur Synchronisierung von Dateien und Verzeichnissen mit verschiedenen Cloud-Speicherdiensten.

Vulnerabilities 10

  • High 7.5
    CVE-2026-116189

    rclone 1.55.0 before 1.75.2 selfupdate Signature Verification Bypass via SHA256SUMS

    rclone from 1.55.0 before 1.75.2 contains a signature verification bypass in stable selfupdate that trusts checksums from unsigned bytes preceding the PGP-clearsigned SHA256SUMS block. Attackers controlling the release distribution path can prepend an unsigne…

    rclone rclone rclone rclone Debian Ubuntu Alpine
  • High 7.5
    CVE-2026-116191 Public exploit

    Rclone before 1.75.2 Path Traversal via serve webdav MKCOL

    Rclone before 1.75.2 contains a path traversal vulnerability in serve webdav that allows unauthenticated attackers to write above the served root by sending an unvalidated '..' path component. Attackers can send MKCOL /.. to plant a VFS node, then PUT, MOVE, …

    rclone rclone rclone rclone Debian Ubuntu Alpine
  • Medium 6.8
    CVE-2026-116194

    Rclone 1.52.0 before 1.75.2 CSRF via pCloud OAuth Callback

    Rclone from 1.52.0 before 1.75.2 contains a cross-site request forgery vulnerability in the pCloud backend's localhost OAuth callback, which disables the state check and trusts the hostname parameter. Malicious web pages can send a stateless request to port 5…

    rclone rclone rclone rclone Debian Ubuntu Alpine
  • Medium 6.1
    CVE-2026-116195

    Rclone before 1.75.2 Path Traversal via translateLink .rclonelink Suffix Trim

    Rclone before 1.75.2 contains a path traversal vulnerability in the local backend's translateLink function, which trims the .rclonelink suffix from a path after the containment check, so a name can resolve outside the destination root. Attackers can plant a d…

    rclone rclone rclone rclone Ubuntu Alpine
  • Medium 5.9
    CVE-2026-116192

    rclone from 1.37 before 1.74.2 SSRF via --rc-serve scheme-relative remote roots

    rclone from 1.37 before 1.74.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to redirect http and netstorage backend requests by supplying a double-slash root on an existing named remote via --rc-serve. Attackers c…

    rclone rclone rclone rclone Debian Ubuntu Alpine
  • Medium 5.3
    CVE-2026-116188

    rclone serve s3 1.75.0 before 1.75.2 Memory Limit Bypass via Multipart Overflow

    rclone serve s3 versions 1.75.0 before 1.75.2 contain an integer overflow vulnerability in multipart reorder-memory accounting that bypasses the configured buffer limit. Attackers can open two concurrent current-part PUT requests declaring huge lengths to wra…

    rclone rclone rclone rclone Debian Ubuntu Alpine
  • Medium 5.3
    CVE-2026-116193

    Rclone 1.64.0 before 1.75.2 serve webdav Authentication Bypass via OPTIONS Requests

    Rclone from 1.64.0 before 1.75.2 contains an authentication bypass vulnerability in serve webdav that lets unauthenticated attackers skip authentication by sending OPTIONS requests. Attackers can probe arbitrary paths and compare Allow header values to determ…

    rclone rclone rclone rclone Ubuntu Alpine
  • Medium 5.3
    CVE-2026-116196

    Rclone before v1.75.2 B2 Credential Leak on Redirect via --b2-download-url

    Rclone before v1.75.2 contains a credential exposure vulnerability in the b2 backend that leaks the live account Authorization token and SSE-C keys on HTTP redirects from --b2-download-url hosts. Attackers can observe a same-host HTTPS-to-HTTP downgrade redir…

    rclone rclone rclone rclone Debian Ubuntu Alpine
  • Medium 5.0
    CVE-2026-116187

    Rclone v1.68.0 before v1.75.2 Authorization Bypass in serve s3 Multipart Uploads

    Rclone from v1.68.0 before v1.75.2 contains an authorization bypass vulnerability in serve s3 --auth-proxy that allows authenticated tenants to manipulate other tenants' multipart uploads by referencing their upload IDs. Attackers who learn a victim's bucket,…

    rclone rclone rclone rclone Ubuntu Alpine
  • Low 3.7
    CVE-2026-116190

    rclone v1.56.0 before v1.75.2 WebDAV Credential Header Leak on Redirect

    rclone from v1.56.0 before v1.75.2 contains an information disclosure vulnerability in the WebDAV backend that forwards operator-configured custom credential headers to different hosts on HTTP 3xx redirects. Attackers who control or influence a cross-host red…

    rclone rclone rclone rclone Debian Ubuntu Alpine

Revision history

  1. #2

    Neue Updates von Amazon aufgenommen

  2. #1

    Initiale Fassung

References