CVE-2026-41179

CVE-2026-47668 rclone RCE のテスト環境 REF1: https://github.com/rclone/rclone/security/advisories/GHSA-jfwf-28xr-xw6q REF2: https://github.com/pssec-io/CVE-2026-41179 rce.py /operations/fdinfo に対する RCE。利便性のため、出力を stderr にリダイレクトします ./rce.py uname -a exit status 1 Return code: OK OUTPUT Linux...

RClone RC - Command Injection

Rclone = 1.48.0 and = 1.48.0 and 1.73.5 contains an unauthenticated local command execution caused by unauthenticated access to the RC endpoint operations/fsinfo with attacker-controlled fs input, letting unauthenticated attackers execute local commands, exploit requires reachable RC deployment...

Rclone RC - Broken Access Control

Rclone = 1.45.0 and = 1.45.0 and 1.73.5 contains a broken access control vulnerability caused by unauthenticated access to the RC endpoint options/set allowing mutation of global runtime configuration, letting unauthenticated attackers access sensitive administrative functions, exploit requires R...

CVE-2026-41179

CVE-2026-41179 — rclone RC API 인증 없는 RCE ⚠️ 교육 목적으로만 제공 이 저장소는 보안 연구, 교육 및 인가된 실습 환경에서만 사용하도록 엄격히 제한됩니다. PSSec 및 이 저장소의 기여자들은 본 저장소에 포함된 정보, 코드 또는 기술의 무단, 불법 또는 악의적 사용을 묵인하거나 지지하지 않으며 이에 대한 어떠한 책임도 지지 않습니다. 이 저장소를 사용함으로써 귀하는 자신의 행동에 전적으로 책임이 있으며, 소유한 시스템 또는 명시적 서면 허가를 받은 시스템에 대해서만 테스트를 수행할 것에...

ROOT-APP-GOBINARY-CVE-2026-71312 CVE-2026-71312 in github.com/rclone/rclone - Patched by Root

Root has patched CVE-2026-71312 in the github.com/rclone/rclone package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-88044 CVE-2026-88044 in github.com/rclone/rclone - Patched by Root

Root has patched CVE-2026-88044 in the github.com/rclone/rclone package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-71309 CVE-2026-71309 in github.com/rclone/rclone - Patched by Root

Root has patched CVE-2026-71309 in the github.com/rclone/rclone package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-54572 CVE-2026-54572 in github.com/rclone/rclone - Patched by Root

Root has patched CVE-2026-54572 in the github.com/rclone/rclone package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-59733 CVE-2026-59733 in github.com/rclone/rclone - Patched by Root

Root has patched CVE-2026-59733 in the github.com/rclone/rclone package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-88017 CVE-2026-88017 in github.com/rclone/rclone - Patched by Root

Root has patched CVE-2026-88017 in the github.com/rclone/rclone package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-49980 CVE-2026-49980 in github.com/rclone/rclone - Patched by Root

Root has patched CVE-2026-49980 in the github.com/rclone/rclone package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-88018 CVE-2026-88018 in github.com/rclone/rclone - Patched by Root

Root has patched CVE-2026-88018 in the github.com/rclone/rclone package for Root:Go. Multiple fixed versions available...

passwordcheck

rclone 設定ファイル用 passwordcheck https://github.com/rclone/rclone/issues/4783 で、rclone config によって生成されたパスワードが安全でない可能性があるというセキュリティ問題が発見されました。 このプログラムは、お使いの rclone 設定ファイルにこれらのパスワードが含まれていないかチェックします。 インストール お使いの OS とアーキテクチャに適した zip ファイルをここからダウンロードしてください: https://github.com/rclone/passwordcheck/releases z...

CVE-2025-71405 vulnerabilities

Vulnerabilities for packages: step-issuer, cloudflared, dapr-fips, caddy-fips, tkn-fips, step, gogatekeeper, kyverno-policy-reporter-ui, rclone-fips, dapr, sftpgo, buf, caddy, karma, rclone, step-fips, kyverno-policy-reporter-ui-fips, telegraf, tkn, step-issuer-fips, gitness, step-ca-fips, step-c...

GHSA-XCVF-46F4-XWXF vulnerabilities

Vulnerabilities for packages: karma, gogatekeeper, gitness, caddy, tkn, sftpgo, step, cloudflared, rclone, step-ca, step-issuer, buf, kyverno-policy-reporter-ui...

CVE-2025-71405 vulnerabilities

Vulnerabilities for packages: karma, gogatekeeper, gitness, caddy, tkn, sftpgo, step, cloudflared, rclone, step-ca, step-issuer, buf, kyverno-policy-reporter-ui...

ROS-20261002-73-0155

The vulnerability in rclone is related to errors in system configuration or settings. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions by sending specially crafted HTTP requests...

openSUSE 16 Security Update : rclone (openSUSE-SU-2026:21999-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21999-1 advisory. Changes in rclone: - Update to version 1.75.1: boo1279548 - Security - archive - Fix zip slip path traversal in untrusted zip files...

ROS-20261002-73-0156

The vulnerability of the RC-server of the cloud synchronization tool Rclone relates to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted request to the operations/fsinfo endpoi...

ROS-20261002-73-0142

The vulnerability in rclone is related to the lack of authentication for the critical function. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...