Rclone 1.75.0 S3 Multipart Declared-Length Memory Exhaustion (CVE-2026-88045)

The version of Rclone installed on the remote host is 1.75.0. It is, therefore, affected by a denial of service vulnerability: - In streamed multipart mode, rclone serve s3 passes the request's declared part length to multipart.NewRW.ReservecontentLength before reading any part data, which...