CVE-2026-116189

The rclone utility (versions 1.55.0 before 1.75.2 ) is vulnerable to a signature verification bypass within its stable selfupdate functionality. The root cause is that the software trusts checksums from unsigned bytes that precede the PGP-clearsigned SHA256SUMS block. An attacker who controls the...