https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T10:47:39.779192+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-rclone-2026-79781 BIT-rclone-2026-79781 — rclone serve s3 Path Traversal via dot-dot object keys 2026-10-02T10:47:39.787824+00:00

Affected: Bitnami: rclone

rclone serve s3 before 1.74.4 contains a path traversal vulnerability that allows attackers to read and overwrite root-level files by using dot-dot segments in S3 object keys. Attackers can send requests with object keys like ../root-secret.txt to escape the bucket namespace and access files in the serve root directory.

 https://cve.radiocsirt.org/vuln/euvd-2026-358868 EUVD-2026-358868 2026-10-02T10:47:39.787873+00:00 EUVD-2026-358868 https://cve.radiocsirt.org/vuln/fkie_cve-2026-79781 fkie_cve-2026-79781 2026-10-02T10:47:39.787890+00:00

rclone serve s3 before 1.74.4 contains a path traversal vulnerability that allows attackers to read and overwrite root-level files by using dot-dot segments in S3 object keys. Attackers can send requests with object keys like ../root-secret.txt to escape the bucket namespace and access files in the serve root directory.

 https://cve.radiocsirt.org/vuln/ghsa-98fh-ch8q-6529 GHSA-98fh-ch8q-6529 2026-10-02T10:47:39.787912+00:00

rclone serve s3 before 1.74.4 contains a path traversal vulnerability that allows attackers to read and overwrite root-level files by using dot-dot segments in S3 object keys. Attackers can send requests with object keys like ../root-secret.txt to escape the bucket namespace and access files in the serve root directory.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-79781 UBUNTU-CVE-2026-79781 2026-10-02T10:47:39.787927+00:00

Affected: Ubuntu:18.04:LTS: rclone, Ubuntu:Pro:20.04:LTS: rclone, Ubuntu:Pro:22.04:LTS: rclone, Ubuntu:Pro:24.04:LTS: rclone, Ubuntu:Pro:26.04:LTS: rclone

rclone serve s3 before 1.74.4 contains a path traversal vulnerability that allows attackers to read and overwrite root-level files by using dot-dot segments in S3 object keys. Attackers can send requests with object keys like ../root-secret.txt to escape the bucket namespace and access files in the serve root directory.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2266 WID-SEC-W-2026-2266 — rclone: Mehrere Schwachstellen 2026-10-02T10:47:39.787952+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in rclone ausnutzen, um beliebige Dateien zu lesen und zu schreiben, sowie Informationen offenzulegen und Sicherheitsmechanismen zu umgehen.