EUVD-2026-44530
GHSA-4vr5-p2gc-h23p
Severity by source
AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:L
Local execution of rclone by a deceived user is required (AV:L, UI:R); no privileges needed; scope changes because files escape the destination prefix to sibling paths.
Primary rating from Vendor (github).
CVSS VectorVendor: github
Lifecycle Timeline
3DescriptionCVE.org
Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.74.4, rclone archive extract can write extracted files outside the user-selected destination prefix when extracting a crafted archive containing parent path components such as ../, allowing creation or overwrite of sibling objects in the same bucket or path scope. This issue is fixed in version 1.74.4.
AnalysisAI
Path traversal (Zip Slip) in Rclone's archive extract command allows crafted archives containing ../ or ..\ path components in entry names to write extracted files outside the user-selected destination prefix. All Rclone versions prior to 1.74.4 are affected; an attacker who can induce a user to run rclone archive extract against a malicious archive can create or overwrite sibling objects in the same bucket or parent path scope. No public exploit code has been identified and the vulnerability is not in CISA KEV; EPSS at 0.14% (4th percentile) reflects low real-world exploitation probability.
Technical ContextAI
Rclone (CPE: cpe:2.3:a:rclone:rclone:*:*:*:*:*:*:*:*) is a Go-based command-line utility for syncing files across cloud storage providers. The vulnerable component is the ArchiveExtract function in cmd/archive/extract/extract.go. The root cause (CWE-22: Path Traversal) is the failure to sanitize .. segments in archive entry NameInArchive fields before joining them to the destination path via path.Join(dstDir, remote). Go's path.Join silently resolves traversal sequences, so an entry named ../escaped.txt resolves one level above the intended destination. The bug class is known as 'Zip Slip' and is generic to archive libraries that do not canonicalize entry paths pre-write. The fix introduces a destPath() helper that splits each entry name on both / and \ separators and rejects any segment equal to .., handling Windows-style backslash paths used in crafted archives. Both forward-slash and backslash traversal are now tested by the added TestExtractPathTraversal integration test.
RemediationAI
Upgrade Rclone to version 1.74.4 or later; this is the vendor-confirmed fix. Binaries and source are available at https://github.com/rclone/rclone/releases/tag/v1.74.4, with the underlying code changes in commits https://github.com/rclone/rclone/commit/1a746732441e8158f32fab35924b23701e719a8c and https://github.com/rclone/rclone/commit/d11efe0d58fe6a2d6d90675bb9d8ee5840c51e1d. If immediate upgrade is not feasible, avoid invoking rclone archive extract against archives sourced from untrusted or unverified parties; this eliminates the attack surface entirely with no operational impact to other rclone operations (sync, copy, etc.). Additionally, restrict write permissions on cloud storage buckets to the minimum required paths so that even a successful traversal cannot overwrite critical objects.
Authentication bypass in rclone's S3 server mode (rclone serve s3) allows any unauthenticated network attacker to impers
PowerShell smart-quote filename injection in rclone's SFTP backend allows an attacker who controls remote filenames to e
An issue was discovered in Rclone before 1.53.3. Rated high severity (CVSS 7.5), this vulnerability is remotely exploita
Cross-session credential isolation failure in rclone's FTP auth-proxy driver (versions 1.64.0-1.75.0) allows an authenti
Symlink escape in rclone's local backend (prior to v1.75.1) allows an attacker who controls sync source contents to appl
FTP CRLF injection in rclone before 1.75.0 allows an attacker who can place crafted filenames in a source namespace to i
Path traversal in rclone prior to 1.75.1 allows an attacker who can populate a source object store with raw `..` key seg
Cleartext disclosure of AWS STS session tokens affects rclone before 1.74.4 when its S3 backend follows a redirect that
Authentication/authorization bypass in rclone's dynamic serve interface (versions 1.70.0 through 1.75.0) lets remote att
Path traversal in the `rclone serve restic --private-repos` REST server (versions prior to 1.74.4) allows an authenticat
Arbitrary file write via symlink traversal in Rclone prior to 1.74.4 lets an attacker-controlled remote escape the local
Memory exhaustion in rclone 1.75.0's serve S3 multipart upload handler allows remote attackers to exhaust process or hos
Same weakness CWE-22 – Path Traversal
View allSame technique Path Traversal
View allVendor StatusVendor
SUSE
Severity: Moderate| Product | Status |
|---|---|
| SUSE Package Hub 15 SP7 | Fixed |
| openSUSE Leap 16.0 | Fixed |
| openSUSE Tumbleweed | Fixed |
| SUSE Package Hub 15 SP7 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today