7 matches found
GO-2026-5466 Unauthenticated backend instantiation in github.com/rclone/rclone
The operations/fsinfo remote control RC endpoint in rclone was registered without requiring authentication. This allowed unauthenticated callers to instantiate arbitrary backends via inline backend definitions, which could lead to local command execution if the backend configuration allows it e.g...
9.8CVSS6.6AI score0.05299EPSS
SaveExploits2References3
20