1046 matches found
passwordcheck
passwordcheck for rclone config files In https://github.com/rclone/rclone/issues/4783 a security issue was found which meant that passwords generated by "rclone config" might be insecure. This program checks your rclone config file for any of those passwords. Installation Download the relevant zi...
RClone RC - Command Injection
Rclone = 1.48.0 and = 1.48.0 and 1.73.5 contains an unauthenticated local command execution caused by unauthenticated access to the RC endpoint operations/fsinfo with attacker-controlled fs input, letting unauthenticated attackers execute local commands, exploit requires reachable RC deployment...
Rclone RC - Broken Access Control
Rclone = 1.45.0 and = 1.45.0 and 1.73.5 contains a broken access control vulnerability caused by unauthenticated access to the RC endpoint options/set allowing mutation of global runtime configuration, letting unauthenticated attackers access sensitive administrative functions, exploit requires R...
CVE-2026-41179
CVE-2026-41179 — rclone RC API Unauthenticated RCE ⚠️ EDUCATIONAL PURPOSES ONLY This repository is intended strictly for security research, education, and authorized lab environments. PSSec and the contributors of this repository do not condone, support, or take any responsibility for any...
CLEANSTART-2026-EI53048 Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer
Security vulnerability affects the rclone package. The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer...
CLEANSTART-2026-MQ38153 VP8L decoding in golang
Security vulnerability affects the rclone package. VP8L decoding in golang...
CLEANSTART-2026-XB95464 Security fix for GHSA-xmrv-pmrh-hhx2 applied in: rclone 1.71.2-r8
Security vulnerability affects the rclone package. This issue is resolved in later releases. See references for vulnerability details...
CVE-2026-41179
CVE-2026-47668 Test environment for rclone RCE REF1: https://github.com/rclone/rclone/security/advisories/GHSA-jfwf-28xr-xw6q REF2: https://github.com/pssec-io/CVE-2026-41179 rce.py RCE on /operations/fdinfo, redirects output to stderr for convenience ./rce.py uname -a exit status 1 Return code: ...
CVE-2026-55183
RClone Manager is a cross-platform GUI application designed to help users manage Rclone remotes efficiently. Prior to 0.2.7, RClone Manager starts the local rclone rcd service on 127.0.0.1:51900 with --rc-no-auth, --rc-allow-origin , and --rc-serve. A malicious web page opened by a user while the...
CVE-2026-55183
RClone Manager is a cross-platform GUI application designed to help users manage Rclone remotes efficiently. Prior to 0.2.7, RClone Manager starts the local rclone rcd service on 127.0.0.1:51900 with --rc-no-auth, --rc-allow-origin , and --rc-serve. A malicious web page opened by a user while the...
CVE-2026-55183
Prior to version 0.2.7 , RClone Manager (a cross-platform GUI for managing Rclone remotes) is vulnerable to an unauthenticated remote attack. The application launches the local rclone rcd service on 127.0.0.1:51900 using --rc-no-auth, --rc-allow-origin *, and --rc-serve. This configuration allows...
CVE-2026-55183 RClone Manager: Unauthenticated RClone Daemon Enables Remote Attack via Malicious Web Page
RClone Manager is a cross-platform GUI application designed to help users manage Rclone remotes efficiently. Prior to 0.2.7, RClone Manager starts the local rclone rcd service on 127.0.0.1:51900 with --rc-no-auth, --rc-allow-origin , and --rc-serve. A malicious web page opened by a user while the...
OPENSUSE-SU-2026:12112-1 rclone-1.75.2-1.1 on GA media
These are all security issues fixed in the rclone-1.75.2-1.1 package on the GA media of openSUSE Tumbleweed...
GO-2026-6609 vulnerabilities
Vulnerabilities for packages: cert-manager, grafana-pyroscope, gitness, rancher-agent, gitlab-pages, chartmuseum, filebrowser, k8s-device-plugin, rclone, mesosphere-vsphere-csi, openbao, kubernetes, hubble-ui, grafana, falco-no-driver, flux-source-controller, argo-workflows, juicefs,...
GHSA-F4XW-M386-M277 vulnerabilities
Vulnerabilities for packages: cert-manager, grafana-pyroscope, gitness, rancher-agent, gitlab-pages, chartmuseum, filebrowser, k8s-device-plugin, rclone, mesosphere-vsphere-csi, openbao, kubernetes, hubble-ui, grafana, falco-no-driver, flux-source-controller, argo-workflows, juicefs,...
ROOT-APP-GOBINARY-CVE-2026-88017 CVE-2026-88017 in github.com/rclone/rclone - Patched by Root
Root has patched CVE-2026-88017 in the github.com/rclone/rclone package for Root:Go. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2026-49980 CVE-2026-49980 in github.com/rclone/rclone - Patched by Root
Root has patched CVE-2026-49980 in the github.com/rclone/rclone package for Root:Go. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2026-59733 CVE-2026-59733 in github.com/rclone/rclone - Patched by Root
Root has patched CVE-2026-59733 in the github.com/rclone/rclone package for Root:Go. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2026-88018 CVE-2026-88018 in github.com/rclone/rclone - Patched by Root
Root has patched CVE-2026-88018 in the github.com/rclone/rclone package for Root:Go. Multiple fixed versions available...