Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-93987— rclone serve docker Path Traversal via Volume Name

Quick assessment

Affected
rclone rclone
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

rclone 1.56.0 至 1.75.0 版本中， 卷（volume）插件存在路径遍历漏洞。 中的 函数使用 计算卷的挂载点，其中 字段由攻击者通过 Docker VolumeDriver.Create 请求提供。该函数未验证最终路径是否仍位于 （默认为 ）内。随后， 会在挂载前通过 创建该目录。 如果卷名称中包含足够的 组件（例如 ），解析后的路径将位于基础目录之外。这允许任何能够向该插件套接字提交 请求的主体——通常是 Docker 守护进程，或多租户编排环境中的工作负载——利用该漏洞让具有特权权限的 rc

CVSS 3.4 · Low
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-93987

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
rclone serve docker Path Traversal via Volume Name
Source: CVE Program / CVE List V5
Vulnerability Description
rclone versions 1.56.0 through 1.75.0 contain a path traversal vulnerability in the `rclone serve docker` volume plugin. newVolume() in cmd/serve/docker/volume.go computes a volume's mountpoint as filepath.Join(drv.root, name) from the attacker-supplied `name` field of a Docker VolumeDriver.Create request without verifying that the result stays within drv.root (default /var/lib/docker-volumes/rclone), and checkMountpoint() then creates that directory with file.MkdirAll before mounting. A volume name containing enough `..` components (e.g. "../../../../../../etc") therefore resolves outside the base directory, allowing anyone able to submit a VolumeDriver.Create request to the plugin socket — normally the Docker daemon, or a workload that can request named volumes in a multi-tenant orchestration setup — to make the privileged rclone plugin process create a directory and mount a remote filesystem specified in the same request at an arbitrary host path, shadowing or disrupting system directories. The advisory notes Volume.restoreState() had the same missing validation when reloading persisted volume state. Fixed in 1.75.1.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
文件名或路径的外部可控制
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
rclone rclone 1.56.0 ~ 1.75.1 -

II. Public POCs for CVE-2026-93987

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-93987

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-93987 (2)

IV. Related Vulnerabilities

Same product: rclone
Same vendor: rclone
Same weakness: CWE-73

V. Comments for CVE-2026-93987

No comments yet

Leave a comment