Skip to content
OpenAdvisories

Package · Alpine

rclone

52 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.2
    CVE-2026-41179 Public exploit

    RClone: Unauthenticated operations/fsinfo allows attacker-controlled backend instantiation and local command execution

    Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Starting in version 1.48.0 and prior to version 1.73.5, the RC endpoint `operations/fsinfo` is exposed without `AuthRequired: true` and accepts attac…

    rclone rclone rclone rclone Debian Ubuntu Alpine Go
  • Critical 9.1
    CVE-2026-33186 Public exploit

    gRPC-Go has an authorization bypass via missing leading slash in :path

    gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 `:path` pseudo-header. The gRPC-Go server was too lenient in its routing logic, accepting requests …

    grpc grpc-go rclone google-guest-agent Debian Ubuntu Alpine Go
  • Critical 9.1
    CVE-2024-45337 Public exploit

    Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

    Applications and libraries which misuse connection.serverAuthenticate (via callback field ServerConfig.PublicKeyCallback) may be susceptible to an authorization bypass. The documentation for ServerConfig.PublicKeyCallback says that "A call to this function do…

    golang.org/x/crypto golang.org/x/crypto/ssh lxd rclone Debian Ubuntu Alpine Go