github.com/rclone/rclone vulnerabilities
CVEs whose affected-version data names the github.com/rclone/rclone package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
32 CVEsRSS
CVE-2026-49980Critical· 9.8Rclone: Unauthenticated command execution in `rclone rcd --rc-serve` via inline remote instantiation, bypassing CVE-2026-41179 fix
Rclone: Unauthenticated command execution in `rclone rcd --rc-serve` via inline remote instantiation, bypassing CVE-2026-41179 fix
▾ Midnightrclone · github.com/rclone/rcloneEPSS 0.74%via GHSA
CVE-2026-41179Critical· 9.8PoCRClone: Unauthenticated operations/fsinfo allows attacker-controlled backend instantiation and local command execution
RClone: Unauthenticated operations/fsinfo allows attacker-controlled backend instantiation and local command execution
▾ Abyssalrclone · github.com/rclone/rcloneEPSS 8.6%via OSV