EUVD-2026-53619
GHSA-2m8m-jhrm-w6j2
Severity by source
AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
AC:H reflects the required non-default PowerShell SSH shell configuration; PR:L and UI:R retained from vendor vector as file-write access and victim-triggered hashing are confirmed prerequisites.
Primary rating from Vendor (GitHub_M).
CVSS VectorVendor: GitHub_M
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
4DescriptionCVE.org
rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to v1.75.0, rclone interpolates remote SFTP paths into PowerShell hash commands in backend/sftp/sftp.go, and quoteOrEscapeShellPath escapes only ASCII apostrophe even though PowerShell treats U+2018, U+2019, U+201A, and U+201B as single-quote delimiters, allowing an attacker-controlled filename to terminate the intended path literal and append PowerShell statements that execute as the victim SSH account when server-side hashing is invoked. This issue is fixed in v1.75.0.
AnalysisAI
PowerShell smart-quote filename injection in rclone's SFTP backend allows an attacker who controls remote filenames to execute arbitrary PowerShell commands as the victim's SSH account on the server. All rclone versions prior to v1.75.0 are affected when the SFTP remote uses PowerShell as the SSH command shell and server-side hashing is invoked. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Three specific non-default conditions must all be present: (1) the SFTP remote's SSH command shell must be PowerShell - standard POSIX/OpenSSH deployments using bash or sh are entirely unaffected, as the Unicode quoting issue is PowerShell-specific; (2) SSH exec must be enabled on the SFTP server; and (3) rclone must invoke server-side hashing for the affected remote, either explicitly configured or via autodetection. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The vendor-assigned CVSS 8.0 vector (AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) reflects high impact but may overstate real-world exploitability. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker with SFTP write access to a Windows-hosted SFTP server creates a file whose name contains a Unicode smart quote (e.g., U+2019 ') followed by a semicolon and a PowerShell payload such as an outbound HTTP beacon or lateral-movement command. When the victim runs rclone with server-side hashing enabled against that remote, rclone constructs a PowerShell Get-FileHash command incorporating the malicious filename - the smart quote closes the path literal, and the injected statement executes as the victim's SSH account on the server. … |
| Remediation | Upgrade rclone to v1.75.0 or later, available at https://github.com/rclone/rclone/releases/tag/v1.75.0. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify all systems running rclone with SFTP remotes configured on Windows or PowerShell-enabled SFTP servers. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
An issue was discovered in Rclone before 1.53.3. Rated high severity (CVSS 7.5), this vulnerability is remotely exploita
FTP CRLF injection in rclone before 1.75.0 allows an attacker who can place crafted filenames in a source namespace to i
Cleartext disclosure of AWS STS session tokens affects rclone before 1.74.4 when its S3 backend follows a redirect that
Path traversal in the `rclone serve restic --private-repos` REST server (versions prior to 1.74.4) allows an authenticat
Arbitrary file write via symlink traversal in Rclone prior to 1.74.4 lets an attacker-controlled remote escape the local
In Rclone 1.42, use of "rclone sync" to migrate data between two Google Cloud Storage buckets might allow attackers to t
Denial-of-service vulnerabilities in rclone's archive backend SquashFS parser allow an attacker with write access to rcl
Path traversal in rclone's serve s3 command (versions before 1.74.4) allows unauthenticated remote attackers to both rea
Unauthenticated credential exposure in rclone before 1.75.0 allows remote attackers to retrieve backend storage secrets
Credential exposure in rclone's WebDAV backend allows an adjacent on-path attacker to capture and replay Basic authentic
Credential exposure in rclone before v1.75.0 allows network-adjacent attackers to capture IBM IAM bearer tokens during s
Rclone before v1.75.0 panics in the WebDAV TUS creation handler when a transport failure returns a nil HTTP response, be
Same weakness CWE-78 – OS Command Injection
View allSame technique Command Injection
View allVendor StatusVendor
Share
External POC / Exploit Code
Leaving vuln.today