https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T07:59:45.546887+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-52522 CVE-2024-52522 — Rclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata 2026-10-05T07:59:45.569394+00:00

Affected: rclone

Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Insecure handling of symlinks with --links and --metadata in rclone while copying to local disk allows unprivileged users to indirectly modify ownership and permissions on symlink target files when a superuser or privileged process performs a copy. This vulnerability could enable privilege escalation and unauthorized access to critical system files, compromising system integrity, confidentiality, and availability. This vulnerability is fixed in 1.68.2.