rclone vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 202641

Newest CVEs

• CVE-2026-116196

  Rclone before v1.75.2 B2 Credential Leak on Redirect via --b2-download-url

  rclone · rclone

  Medium6.0
• CVE-2026-116195

  Rclone before 1.75.2 Path Traversal via translateLink .rclonelink Suffix Trim

  rclone · rclone

  High7.0
• CVE-2026-116194

  Rclone 1.52.0 before 1.75.2 CSRF via pCloud OAuth Callback

  rclone · rclone

  High7.6
• CVE-2026-116193

  Rclone 1.64.0 before 1.75.2 serve webdav Authentication Bypass via OPTIONS Requests

  rclone · rclone

  Medium6.9
• CVE-2026-116192

  rclone from 1.37 before 1.74.2 SSRF via --rc-serve scheme-relative remote roots

  rclone · rclone

  High8.2
• CVE-2026-116191

  Rclone before 1.75.2 Path Traversal via serve webdav MKCOL

  rclone · rclone

  High8.7
• CVE-2026-116190

  rclone v1.56.0 before v1.75.2 WebDAV Credential Header Leak on Redirect

  rclone · rclone

  Medium6.3
• CVE-2026-116189

  rclone 1.55.0 before 1.75.2 selfupdate Signature Verification Bypass via SHA256SUMS

  rclone · rclone

  High7.7
• CVE-2026-116188

  rclone serve s3 1.75.0 before 1.75.2 Memory Limit Bypass via Multipart Overflow

  rclone · rclone

  Medium6.9
• CVE-2026-116187

  Rclone v1.68.0 before v1.75.2 Authorization Bypass in serve s3 Multipart Uploads

  rclone · rclone

  Medium6.1