Skip to content
OpenAdvisories

Package · Debian

rclone

40 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-116191 Public exploit

    Rclone before 1.75.2 Path Traversal via serve webdav MKCOL

    Rclone before 1.75.2 contains a path traversal vulnerability in serve webdav that allows unauthenticated attackers to write above the served root by sending an unvalidated '..' path component. Attackers can send MKCOL /.. to plant a VFS node, then PUT, MOVE, …

    rclone rclone rclone rclone Debian Ubuntu Alpine
  • Critical 9.2
    CVE-2026-41179 Public exploit

    RClone: Unauthenticated operations/fsinfo allows attacker-controlled backend instantiation and local command execution

    Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Starting in version 1.48.0 and prior to version 1.73.5, the RC endpoint `operations/fsinfo` is exposed without `AuthRequired: true` and accepts attac…

    rclone rclone rclone rclone Debian Ubuntu Alpine Go