Skip to content
OpenAdvisories

Vendor

rclone

42 known vulnerabilities.

Products

rclone 42
All Critical High Medium Low Exploited only Public exploit

42 results · Feed

  • Critical 9.2
    CVE-2026-41176 Scanner template EPSS 33%

    Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution

    Rclone is a command-line program to sync files and directories to and from different cloud storage providers. The RC endpoint `options/set` is exposed without `AuthRequired: true`, but it can mutate global runtime configuration, including the RC option block …

    rclone rclone telegraf-1.38 rclone Debian Ubuntu Wolfi Go
  • Medium 5.4
    CVE-2024-52522

    Rclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata

    Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Insecure handling of symlinks with --links and --metadata in rclone while copying to local disk allows unprivileged users to indirectly modify owners…

    rclone rclone rclone rclone Debian Ubuntu Alpine Wolfi Go