Login Request a demo
RC
Product
rclone
by rclone · last CVE Oct 25, 2026
44
CVEs
0
On KEV
9.8
Max CVSS
10
New 30D
Vulnerabilities44In the news0Timeline
Severity mix
Critical 5High 11Medium 22Low 6
Severity
All severities44Critical5High11Medium22Low6
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add rclone to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-116190
New
3.7
0%
Oct 25
rclone v1.56.0 before v1.75.2 WebDAV Credential Header Leak on Redirect
Affected: 1.56.0 before 1.75.2
CVE-2026-79783
3.6
0%
Aug 25
rclone before 1.74.4 Privilege Escalation via setuid Metadata
Affected: before 1.74.4
CVE-2026-93987
3.4
0%
Sep 19
rclone serve docker Path Traversal via Volume Name
Affected: 1.56.0 before 1.75.1
CVE-2026-93986
3.1
0%
Sep 19
rclone before 1.75.1 Path Traversal via Directory Listing Names
Affected: before 1.75.1
CVE-2026-79782
3.1
0%
Aug 25
rclone before 1.74.4 Security Token Disclosure via HTTPS to HTTP Redirect
Affected: before 1.74.4
CVE-2026-79777
2.7
0%
Aug 25
rclone before v1.75.0 Information Disclosure via RC API
Affected: before 1.75.0
Showing 6