https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T14:45:21.386923+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-79781 CVE-2026-79781 — rclone serve s3 Path Traversal via dot-dot object keys 2026-10-04T14:45:21.388219+00:00

Affected: rclone

rclone serve s3 before 1.74.4 contains a path traversal vulnerability that allows attackers to read and overwrite root-level files by using dot-dot segments in S3 object keys. Attackers can send requests with object keys like ../root-secret.txt to escape the bucket namespace and access files in the serve root directory.