PRODUCT PROFILE

Rclone

Created from vulnerability 18166 relation agent

关联漏洞

共找到 2 条公开漏洞记录

严重CVE-2026-411762026/06/25

Rclone RC - Broken Access Control

Rclone >= 1.45.0 and < 1.73.5 contains a broken access control vulnerability caused by unauthenticated access to the RC endpoint `options/set` allowing mutation of global runtime configuration, letting unauthenticated attackers access sensitive administrative functions, exploit requires RC server started without global HTTP authentication.

RclonePoC 已收录

CVSS—

严重CVE-2026-411792026/06/25

RClone RC - Command Injection

Rclone >= 1.48.0 and < 1.73.5 contains an unauthenticated local command execution caused by unauthenticated access to the RC endpoint operations/fsinfo with attacker-controlled fs input, letting unauthenticated attackers execute local commands, exploit requires reachable RC deployment without global HTTP authentication.

RclonePoC 已收录

CVSS—