Skip to content
OpenAdvisories

Vendor

rclone

42 known vulnerabilities.

Products

rclone 42
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-116191 Public exploit

    Rclone before 1.75.2 Path Traversal via serve webdav MKCOL

    Rclone before 1.75.2 contains a path traversal vulnerability in serve webdav that allows unauthenticated attackers to write above the served root by sending an unvalidated '..' path component. Attackers can send MKCOL /.. to plant a VFS node, then PUT, MOVE, …

    rclone rclone rclone rclone Debian Ubuntu Alpine