Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-88014— rclone archive/zip: Zip Slip via unsanitized zip entry names lets a malicious archive escape its own namespace

Quick assessment

Affected
rclone rclone
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

rclone 是一个用于在不同云存储提供商之间同步文件和目录的命令行程序。在版本 1.72.0 到 1.75.1 期间，归档 ZIP 后端的 方法（位于 ）会接受来自不可信中央目录的 值，并在暴露经过清理的条目名称时，未能确保这些名称仍然位于归档命名空间内部。例如，形如 的条目可能在 之后依然保留，并成为 的值，而 和 会将其作为目标相对路径使用，从而导致在不自行约束路径的后端上， 或 可能会将文件写入所选目标目录之外的位置。此外，非空根目录的检查使用了 且未加路径边界判断，因此根目录为 时可能会错误地包含其同级目

CVSS 6.3 · Medium

Possible ATT&CK Techniques 1 AI

T1567 · Exfiltration Over Web Service
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-88014

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
rclone archive/zip: Zip Slip via unsanitized zip entry names lets a malicious archive escape its own namespace
Source: CVE Program / CVE List V5
Vulnerability Description
rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.72.0 until 1.75.1, the archive ZIP backend method (*Fs).readZip in backend/archive/zip/zip.go accepts archive/zip.File.Name values from an untrusted central directory and exposes cleaned entry names without ensuring that they remain inside the archive namespace. Entries such as ../../etc/cron.d/evil can survive path.Clean and become Object.Remote() values that fs/sync and fs/operations use as destination-relative paths, allowing rclone copy or sync to write outside the selected destination on backends that do not independently confine the path. The non-empty root check also used strings.HasPrefix without a path boundary, so root foo could incorrectly include sibling foobar entries. This issue is fixed in version 1.75.1.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
rclone rclone >= 1.72.0, < 1.75.1 -

II. Public POCs for CVE-2026-88014

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-88014

请登录查看更多情报信息。

Other References for CVE-2026-88014 (3)

Same Patch Batch · rclone · 2026-09-10 · 9 CVEs total

CVE-2026-88018 9.8 CRITICAL rclone serve s3: --auth-proxy without --auth-key authenticates nobody - full SigV4 signatu
CVE-2026-88044 9.1 CRITICAL rclone: RC per-server auth-proxy bypass
CVE-2026-88045 7.5 HIGH rclone: S3 multipart declared-length memory exhaustion
CVE-2026-88017 7.3 HIGH rclone: FTP cross-session auth-proxy backend confusion
CVE-2026-88016 7.1 HIGH rclone: Directory metadata (chmod/chown/chtimes) applied through a planted symlink in rclo
CVE-2026-88015 5.3 MEDIUM rclone local: crafted Range request against a translated symlink panics (DoS)
CVE-2026-88046 5.3 MEDIUM rclone: source object names can escape the configured root on upload
CVE-2026-88013 3.7 LOW rclone: http backend forwards custom/auth headers to a different host on redirect

IV. Related Vulnerabilities

Same product: rclone
Same vendor: rclone
Same weakness: CWE-22

V. Comments for CVE-2026-88014

No comments yet

Leave a comment