https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:36:55.002555+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-rclone-2026-93986 BIT-rclone-2026-93986 — rclone before 1.75.1 Path Traversal via Directory Listing Names 2026-10-02T22:36:55.083209+00:00

Affected: Bitnami: rclone

rclone before 1.75.1 fails to confine names from server and third-party listing responses to the listed directory, allowing path traversal sequences in object names. Attackers can craft special names containing forward slashes and parent directory references to potentially write outside the destination root, though downstream protections in the local backend currently block actual file escape.

 https://cve.radiocsirt.org/vuln/euvd-2026-373281 EUVD-2026-373281 2026-10-02T22:36:55.083287+00:00 EUVD-2026-373281 https://cve.radiocsirt.org/vuln/fkie_cve-2026-93986 fkie_cve-2026-93986 2026-10-02T22:36:55.083305+00:00

rclone before 1.75.1 fails to confine names from server and third-party listing responses to the listed directory, allowing path traversal sequences in object names. Attackers can craft special names containing forward slashes and parent directory references to potentially write outside the destination root, though downstream protections in the local backend currently block actual file escape.

 https://cve.radiocsirt.org/vuln/ghsa-9g4r-fhf6-vc4c GHSA-9g4r-fhf6-vc4c 2026-10-02T22:36:55.083329+00:00

rclone before 1.75.1 fails to confine names from server and third-party listing responses to the listed directory, allowing path traversal sequences in object names. Attackers can craft special names containing forward slashes and parent directory references to potentially write outside the destination root, though downstream protections in the local backend currently block actual file escape.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-93986 UBUNTU-CVE-2026-93986 2026-10-02T22:36:55.083345+00:00

Affected: Ubuntu:18.04:LTS: rclone, Ubuntu:Pro:20.04:LTS: rclone, Ubuntu:Pro:22.04:LTS: rclone, Ubuntu:Pro:24.04:LTS: rclone, Ubuntu:Pro:26.04:LTS: rclone

rclone before 1.75.1 fails to confine names from server and third-party listing responses to the listed directory, allowing path traversal sequences in object names. Attackers can craft special names containing forward slashes and parent directory references to potentially write outside the destination root, though downstream protections in the local backend currently block actual file escape.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3196 WID-SEC-W-2026-3196 — rclone: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen 2026-10-02T22:36:55.083371+00:00

Ein Angreifer kann mehrere Schwachstellen in rclone ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen oder zu manipulieren, sowie um einen Denial of Service herbeizuführen.