Rclone

14 CVEs across 1 Rclone products. Browse Rclone vulnerabilities, severities, and proof-of-concept exploits.

Rclone products with known CVEs

ProductCVEs
Rclone14
Rclone CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-71313Medium6.92026-08-05rclone is a command-line program to sync files and directories to and from different cloud storage providers. From v1.51.0 until v1.75.0, the local backend in…
CVE-2026-71312High8.02026-08-05rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to v1.75.0, rclone interpolates remote SFTP…
CVE-2026-71311Medium6.42026-08-05rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.0, a valid but nondefault FTP filen…
CVE-2026-71310Medium5.92026-08-05rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.0, the shared HTTP CONNECT helper i…
CVE-2026-713092026-08-05rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.40.0 until 1.75.0, rclone serve restic doe…
CVE-2026-59733High8.82026-07-14Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.74.4, rclone serve restic --private-re…
CVE-2026-59732Medium5.02026-07-14Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.74.4, rclone archive extract can write…
CVE-2026-54572High7.52026-07-14Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.74.4, with -l/--links, rclone serializ…
CVE-2026-49980Critical9.82026-06-24Rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.46.0 until 1.74.3, rclone rcd --rc-serve a…
CVE-2026-41179Critical9.82026-04-23Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Starting in version 1.48.0 and prior to version 1…
CVE-2026-41176Critical9.82026-04-23Rclone is a command-line program to sync files and directories to and from different cloud storage providers. The RC endpoint `options/set` is exposed without…
CVE-2024-525222024-11-15Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Insecure handling of symlinks with --links and --…
CVE-2020-28924High7.52020-11-19An issue was discovered in Rclone before 1.53.3. Due to the use of a weak random number generator, the password generator has been producing weak passwords wit…
CVE-2018-12907High7.52018-06-27In Rclone 1.42, use of "rclone sync" to migrate data between two Google Cloud Storage buckets might allow attackers to trigger the transmission of any URL's co…