All 32 CVE vulnerabilities found in rclone, with AI-generated Chinese analysis, references, and POCs.
This page aggregates security vulnerabilities affecting rclone, an open-source command-line program for managing cloud storage. It collects known software flaws and security weaknesses documented in public advisories for this specific product. The dataset covers vulnerabilities disclosed over the recent years, providing a historical record of security issues identified in the codebase. Readers can use this resource to track the vendor's security advisories, understand the prevalence of specific weakness classes, or look up the complete vulnerability history of the product. The collection includes various types of software defects, ranging from logic errors to potential denial of service conditions, helping users assess the security posture of rclone. By centralizing this information, the page serves as a reference for security professionals and developers who need to monitor updates and patches. This aggregation facilitates a clearer understanding of the types of risks associated with the tool without requiring users to search multiple disparate databases individually. The focus remains strictly on documented security issues that have been publicly reported and assigned identifiers. This data is intended for informational purposes to aid in risk assessment and compliance planning. Users should note that the presence of an entry does not guarantee active exploitability in all deployed versions, as patching status varies by release. The list is updated as new vulnerabilities are confirmed and published by the maintainers or security researchers.
Vendor: rclone
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-41176 | Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution CWE-306 | 9.1 | - | 2026-04-22 |
| CVE-2024-52522 | Rclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata CWE-59 | 8.2 | - | 2024-11-15 |
All 32 known CVE vulnerabilities affecting rclone with full Chinese analysis, references, and POCs where available.