1020 matches found
Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution
Summary The RC endpoint options/set is exposed without AuthRequired: true, but it can mutate global runtime configuration, including the RC option block itself. An unauthenticated attacker can set rc.NoAuth=true, which disables the authorization gate for many RC methods registered with...
GHSA-25QR-6MPR-F7QX Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution
Summary The RC endpoint options/set is exposed without AuthRequired: true, but it can mutate global runtime configuration, including the RC option block itself. An unauthenticated attacker can set rc.NoAuth=true, which disables the authorization gate for many RC methods registered with...
Rclone 访问控制错误漏洞
Rclone is a software developed by the Rclone team that can synchronize data asynchronously from cloud storage. This software supports various cloud storage services such as Google Drive, Amazon Drive, S3, Dropbox, Backblaze B2, One Drive, Swift, Hubic, Cloudfiles, Google Cloud Storage, and Yandex...
OPENSUSE-SU-2026:10584-1 rclone-1.73.5-1.1 on GA media
These are all security issues fixed in the rclone-1.73.5-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-33833
Name of the Vulnerable Software and Affected Versions Rclone versions 1.48.0 through 1.73.4 Description The RC endpoint "operations/fsinfo" is exposed without authentication and accepts attacker-controlled fs input. Since the rc.GetFs function supports inline backend definitions, an unauthenticat...
PT-2026-33832
Name of the Vulnerable Software and Affected Versions Rclone versions 1.45.0 through 1.73.4 Description An authorization bypass exists in the Remote Control RC interface of Rclone. The RC endpoint "options/set" is exposed without requiring authentication, allowing an unauthenticated attacker to...
CVE-2026-32283 vulnerabilities
Vulnerabilities for packages: tetragon, gatus, redis-operator, newrelic-nri-statsd, cerbos, cri-tools, neuvector-dbgen, kafka-proxy, git-lfs, terraform-provider-random, minio-operator, clickhouse-operator, pguser, act, direnv, kyverno, fluxcd-kustomize-mutating-webhook, cue, hugo,...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: tetragon, gatus, redis-operator, newrelic-nri-statsd, cerbos, cri-tools, neuvector-dbgen, kafka-proxy, git-lfs, terraform-provider-random, minio-operator, clickhouse-operator, pguser, act, direnv, kyverno, fluxcd-kustomize-mutating-webhook, cue, hugo,...
GHSA-7MR4-XJXG-34G6 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, tetragon, xeol, gatus, minio-object-browser, kubernetes-csi-external-attacher, argo-workflows, tkn, verticadb-operator, kots, ko, spegel, prometheus, temporal, scorecard, cerbos, kubescape-operator, cri-tools, ingress-nginx-controller,...
GHSA-XMRV-PMRH-HHX2 vulnerabilities
Vulnerabilities for packages: nemo, terraform-fips, crossplane-provider-aws-efs-fips, grafana-mimir, crossplane-provider-aws-kms, telegraf, crossplane-provider-aws-cloudformation-fips, crossplane-provider-aws-cognitoidentity-fips, tflint, crossplane-provider-aws-servicediscovery-fips,...
CVE-2026-32285 vulnerabilities
Vulnerabilities for packages: chainloop-cli, goreleaser, nuclei, cg, gitlab-runner-fips, influxd, minio-fips, chainloop-control-plane-fips, opentelemetry-collector-contrib, lazygit, datadog-agent-fips, loki-fips, malcontent, mcp-grafana-fips, minio, eksctl, weaviate, loki, prometheus,...
CVE-2026-32285 vulnerabilities
Vulnerabilities for packages: k8sgpt, rclone, goreleaser, kubevela, minio, prometheus, ollama, cri-tools, dgraph, malcontent, grafana, redpanda, opentelemetry-collector-contrib, tempo, eksctl, mcp-grafana, loki, dagger, teleport, terragrunt, datadog-agent, nfpm, gitlab-runner, witness, maru,...
rclone-1.73.3-1.1 on GA media (moderate)
rclone-1.73.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:10419-1 Rating: moderate Cross-References: CVE-2026-33186 CVSS scores: CVE-2026-33186 SUSE : 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVE-2026-33186 SUSE : 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N...
OPENSUSE-SU-2026:10419-1 rclone-1.73.3-1.1 on GA media
These are all security issues fixed in the rclone-1.73.3-1.1 package on the GA media of openSUSE Tumbleweed...
rclone-1.73.2-1.1 on GA media (moderate)
rclone-1.73.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:10313-1 Rating: moderate Cross-References: CVE-2026-1229 CVE-2026-27141 CVSS scores: CVE-2026-27141 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-27141 SUSE : 8.7...
OPENSUSE-SU-2026:10313-1 rclone-1.73.2-1.1 on GA media
These are all security issues fixed in the rclone-1.73.2-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-24647
These are all security issues fixed in the rclone-1.73.2-1.1 package on the GA media of openSUSE Tumbleweed...
rclone-1.73.1-1.1 on GA media (moderate)
rclone-1.73.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:10224-1 Rating: moderate Cross-References: CVE-2025-68121 CVSS scores: CVE-2025-68121 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2025-68121 SUSE : 7.6 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N...
