CVE-2026-41179

CVE-2026-41179 — rclone RC API बिना प्रमाणीकरण के RCE ⚠️ केवल शैक्षणिक उद्देश्यों के लिए यह रिपॉजिटरी विशेष रूप से सुरक्षा अनुसंधान, शिक्षा और अधिकृत प्रयोगशाला वातावरण के लिए है। PSSec और इस रिपॉजिटरी के योगदानकर्ता किसी भी अनधिकृत, अवैध या दुर्भावनापूर्ण उपयोग का समर्थन, अनुमोदन या कोई जिम्मेदार...

CVE-2026-79777

rclone versions before v1.75.0 include full Go stack traces in RC API error responses when panics occur. An authenticated attacker (high privileges required) can trigger panics to leak internal file paths, module versions, goroutine states, and memory addresses. The CVSS 3.1 base score is 2.7 (LO...

EUVD-2026-65535

rclone before v1.75.0 includes full Go stack traces in RC API error responses when panics occur. Attackers can trigger panics to leak internal file paths, module versions, goroutine states, and memory addresses...

GHSA-GWFQ-86J8-7QHV rclone: Verbose Stack Trace Disclosure in RC API Error Responses

Summary When an RC API call triggers a panic recovered by the job runner, the full Go stack trace is included in the JSON error response. This leaks internal file paths, Go module versions, goroutine state, and memory addresses to the API caller. Details The panic recovery in...