https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T10:01:54.564612+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-79783 CVE-2026-79783 — rclone before 1.74.4 Privilege Escalation via setuid Metadata 2026-10-04T10:01:54.579911+00:00

Affected: rclone

rclone before 1.74.4 fails to mask special permission bits when applying source-supplied mode metadata in the local backend, allowing attackers to set setuid/setgid bits on attacker-controlled files. When copying with metadata preservation from an untrusted remote, attackers can plant a setuid binary that escalates privileges to root if rclone runs as root, or to the service account user otherwise.