EUVD-2026-53618
GHSA-8c48-q9wj-3w37
Severity by source
AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H
Non-default encoding config mandates AC:H; source namespace write access mandates PR:L; victim-triggered sync mandates UI:R; file deletion yields I:H and A:H with no confidentiality breach.
Primary rating from Vendor (GitHub_M).
CVSS VectorVendor: GitHub_M
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H
Lifecycle Timeline
3DescriptionCVE.org
rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.0, a valid but nondefault FTP filename encoding in backend/ftp/ftp.go can restore raw CR/LF immediately before an attacker-controlled path is interpolated into the line-oriented FTP control channel, and github.com/jlaffaye/ftp formats the argument through textproto.Conn.Cmd without rejecting CR or LF, allowing a filename such as victim CRLF DELE other-secret CRLF NOOP to inject an independent authenticated FTP command when the victim copies or syncs to a more-privileged FTP destination. This issue is fixed in 1.75.0.
AnalysisAI
FTP CRLF injection in rclone before 1.75.0 allows an attacker who can place crafted filenames in a source namespace to inject arbitrary authenticated FTP commands when a victim syncs to a more-privileged FTP destination using a non-default encoding that exposes raw CR/LF. The dependency github.com/jlaffaye/ftp passes command arguments directly onto the line-oriented FTP control channel via textproto.Conn.Cmd without stripping newlines, and the GHSA advisory confirms a real FTP server executed the injected DELE command during researcher testing. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires three concurrent conditions to be satisfied simultaneously. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The provided CVSS 3.1 score of 6.4 with vector AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H accurately reflects the realistic attack constraints. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker with write access to a shared cloud storage directory creates a file named `victim DELE other-secret NOOP`. When a victim runs rclone to sync from that directory to an FTP server using a manually configured encoding that omits `Ctl`/`CrLf`, rclone decodes the filename to raw bytes and the FTP library forwards a control-channel string that the server parses as three independent commands - completing the intended STOR, then executing `DELE other-secret` with the victim's elevated FTP credentials. … |
| Remediation | Upgrade rclone to version 1.75.0 or later - the vendor-confirmed fix (https://github.com/rclone/rclone/releases/tag/v1.75.0, commit 1df2b70753286c1dfe8366078cbedfdf7f96472c). … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
PowerShell smart-quote filename injection in rclone's SFTP backend allows an attacker who controls remote filenames to e
An issue was discovered in Rclone before 1.53.3. Rated high severity (CVSS 7.5), this vulnerability is remotely exploita
Cleartext disclosure of AWS STS session tokens affects rclone before 1.74.4 when its S3 backend follows a redirect that
Path traversal in the `rclone serve restic --private-repos` REST server (versions prior to 1.74.4) allows an authenticat
Arbitrary file write via symlink traversal in Rclone prior to 1.74.4 lets an attacker-controlled remote escape the local
In Rclone 1.42, use of "rclone sync" to migrate data between two Google Cloud Storage buckets might allow attackers to t
Denial-of-service vulnerabilities in rclone's archive backend SquashFS parser allow an attacker with write access to rcl
Path traversal in rclone's serve s3 command (versions before 1.74.4) allows unauthenticated remote attackers to both rea
Unauthenticated credential exposure in rclone before 1.75.0 allows remote attackers to retrieve backend storage secrets
Credential exposure in rclone's WebDAV backend allows an adjacent on-path attacker to capture and replay Basic authentic
Credential exposure in rclone before v1.75.0 allows network-adjacent attackers to capture IBM IAM bearer tokens during s
Rclone before v1.75.0 panics in the WebDAV TUS creation handler when a transport failure returns a nil HTTP response, be
Same technique Code Injection
View allVendor StatusVendor
Share
External POC / Exploit Code
Leaving vuln.today