PT-2026-33832

Name of the Vulnerable Software and Affected Versions Rclone versions 1.45.0 through 1.73.4 Description An authorization bypass exists in the Remote Control RC interface of Rclone. The RC endpoint "options/set" is exposed without requiring authentication, allowing an unauthenticated attacker to...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: crossplane-provider-sql, spire-server, chartmuseum, crossplane-provider-azure-storage, trivy, gitsign, crossplane-provider-azure-managedidentity, k8ssandra-client, policy-controller, rancher-system-upgrade-controller, libnvidia-container,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: crossplane-provider-sql, spire-server, chartmuseum, crossplane-provider-azure-storage, trivy, gitsign, crossplane-provider-azure-managedidentity, k8ssandra-client, policy-controller, rancher-system-upgrade-controller, libnvidia-container,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: aws-flb-cloudwatch, bento, crossplane-provider-sql, kubescape-operator, chartmuseum, grpc-health-probe, spire-server, opa-envoy, snyk-cli, crossplane-provider-azure-storage, flux-source-controller, boring-registry, kube-arangodb, kubernetes-csi-external-attacher,...

GHSA-XMRV-PMRH-HHX2 vulnerabilities

Vulnerabilities for packages: terragrunt-fips, commercial-chainloop-backend, opencost, longhorn-instance-manager, nemo, crossplane-provider-aws-ecs, crossplane-provider-aws-acm-fips, crossplane-provider-aws-kinesis, commercial-grafana, task-fips, grafana, zarf-fips,...

CVE-2026-32285 vulnerabilities

Vulnerabilities for packages: mcp-grafana, grafana-alloy-fips, opentelemetry-collector-contrib-fips, rclone-fips, kubevela, elastic-agent-fips, cg, goreleaser, minio, terragrunt-fips, opentelemetry-collector, loki-fips, chainloop-cli-fips, gitlab-runner, commercial-grafana,...

CVE-2026-32285 vulnerabilities

Vulnerabilities for packages: cri-tools, tempo, opentelemetry-collector, vcluster, prometheus, rclone, kubevela, nuclei, lazygit, k8sgpt, k3s, terraform-mcp-server, teleport, gitlab-runner, witness, malcontent, maru, nfpm, minio, eksctl, weaviate, dgraph, terragrunt,...

rclone-1.73.3-1.1 on GA media (moderate)

rclone-1.73.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:10419-1 Rating: moderate Cross-References: CVE-2026-33186 CVSS scores: CVE-2026-33186 SUSE : 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVE-2026-33186 SUSE : 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N...

OPENSUSE-SU-2026:10419-1 rclone-1.73.3-1.1 on GA media

These are all security issues fixed in the rclone-1.73.3-1.1 package on the GA media of openSUSE Tumbleweed...

rclone-1.73.2-1.1 on GA media (moderate)

rclone-1.73.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:10313-1 Rating: moderate Cross-References: CVE-2026-1229 CVE-2026-27141 CVSS scores: CVE-2026-27141 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-27141 SUSE : 8.7...

OPENSUSE-SU-2026:10313-1 rclone-1.73.2-1.1 on GA media

These are all security issues fixed in the rclone-1.73.2-1.1 package on the GA media of openSUSE Tumbleweed...

rclone-1.73.1-1.1 on GA media (moderate)

rclone-1.73.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:10224-1 Rating: moderate Cross-References: CVE-2025-68121 CVSS scores: CVE-2025-68121 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2025-68121 SUSE : 7.6 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N...

OPENSUSE-SU-2026:10224-1 rclone-1.73.1-1.1 on GA media

These are all security issues fixed in the rclone-1.73.1-1.1 package on the GA media of openSUSE Tumbleweed...

[SECURITY] Fedora 42 Update: rclone-1.72.1-1.fc42

"rsync for cloud storage" - Google Drive, S3, Dropbox, Backblaze B2, One Driv e, Swift, Hubic, Wasabi, Google Cloud Storage, Azure Blob, Azure Files, Yandex Files...

Fedora 42 : rclone (2026-b4a6ca0bd0)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-b4a6ca0bd0 advisory. Update to 1.72.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Fedora: Security Advisory (FEDORA-2026-b4a6ca0bd0)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 43 Update: rclone-1.72.1-1.fc43

"rsync for cloud storage" - Google Drive, S3, Dropbox, Backblaze B2, One Driv e, Swift, Hubic, Wasabi, Google Cloud Storage, Azure Blob, Azure Files, Yandex Files...

Fedora: Security Advisory (FEDORA-2026-3de3ece93a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 43 : rclone (2026-3de3ece93a)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-3de3ece93a advisory. Update to 1.72.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

[SECURITY] Fedora 41 Update: restic-0.18.1-1.fc41

Fast, secure, efficient backup program. restic supports the following backends for storing backups natively: Local directory sftp server via SSH HTTP REST server protocol, rest-server Amazon S3 either from Amazon or using the Minio server OpenStack Swift BackBlaze B2 Microsoft Azure Blob Storage...