Vulnerability GO-2026-6457
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
11 days ago
September 16, 2026 at 04:56 PM UTC
rclone: source object names can escape the configured root on upload in github.com/rclone/rclone
v1.43.1 - v1.75.0
v1.43.1 - v1.75.0
Summary
rclone: source object names can escape the configured root on upload in github.com/rclone/rclone
Details
rclone: source object names can escape the configured root on upload in github.com/rclone/rclone
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
11 days ago
rclone: S3 multipart declared-length memory exhaustion in github.com/rclone/rclone
v1.75.0 GO-2026-6456
v1.75.0 GO-2026-6456
Unknown
11 days ago
rclone: FTP cross-session auth-proxy backend confusion in github.com/rclone/rclone
v1.64.0 - v1.75.0 GO-2026-6458
v1.64.0 - v1.75.0 GO-2026-6458
Unknown
11 days ago
rclone: Directory metadata (chmod/chown/chtimes) applied through a planted symlink in rclone local --links escapes the destination in github.com/rclone/rclone
v1.43.1 - v1.75.0 GO-2026-6459
v1.43.1 - v1.75.0 GO-2026-6459
Unknown
11 days ago
rclone: RC per-server auth-proxy bypass in github.com/rclone/rclone
v1.70.0 - v1.75.0 GO-2026-6460
v1.70.0 - v1.75.0 GO-2026-6460
Unknown
11 days ago
rclone local: crafted Range request against a translated symlink panics (DoS) in github.com/rclone/rclone
v1.43.1 - v1.75.0 GO-2026-6461
v1.43.1 - v1.75.0 GO-2026-6461
Impacted packages
Timeline
Published
11 days ago
September 16, 2026 at 04:56 PM UTC
Last Modified
9 days ago
September 19, 2026 at 09:25 AM UTC