CVE-2026-88018

creationtimestamp| type| source ---|---|--- 2026-09-10 17:30:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv6lcu5vv52j 2026-09-10 17:39:48+00:00| seen| https://bsky.app/profile/vulnsea.com/post/3mv6lu5v56m2q 2026-09-10 18:08:36+00:00| seen|...

CVE-2026-88018

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, rclone serve s3 configured with --auth-proxy but without --auth-key allows authPairMiddleware to register any client-chosen accessKeyID with an empty ws.s3Secret. gofakes...