EUVD-2026-65541
GHSA-vqwj-943v-724g
Severity by source
CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attacker prepares malicious remote over network (AV:N); high complexity due to prerequisites of -M flag and root execution (AC:H); no privileges on target required (PR:N); victim must run the copy command (UI:R); privilege escalation beyond rclone's own scope to root constitutes scope change (S:C) with full C/I impact.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
3DescriptionCVE.org
rclone before 1.74.4 fails to mask special permission bits when applying source-supplied mode metadata in the local backend, allowing attackers to set setuid/setgid bits on attacker-controlled files. When copying with metadata preservation from an untrusted remote, attackers can plant a setuid binary that escalates privileges to root if rclone runs as root, or to the service account user otherwise.
AnalysisAI
Privilege escalation in rclone before 1.74.4 allows an attacker who controls a source remote to plant a setuid binary on the destination filesystem when the victim uses the --metadata flag during a copy or sync operation. The local backend passes source-supplied mode, uid, and gid metadata verbatim to os.Chmod and os.Chown without masking ModeSetuid or ModeSetgid bits, enabling an attacker to store a crafted binary with mode=40000755 and uid=0 on a remote they control. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires three concurrent conditions: (1) the victim must invoke rclone with the --metadata or -M flag explicitly - this flag is off by default and must be deliberately enabled; (2) the source remote must be attacker-controlled or compromised, capable of serving crafted mode/uid/gid metadata; and (3) the destination must be a local filesystem (the local backend). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The provided CVSS 4.0 score of 2.0 (AV:L/AC:H/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N) reflects a conservative single-metric view. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker who controls an rclone-compatible remote endpoint (e.g., an S3 bucket, SFTP server, or WebDAV share) uploads a crafted shell binary with metadata set to mode=40000755 (setuid world-executable in Go FileMode layout) and uid=0. When a victim administrator runs rclone copy -M attacker-remote: /opt/backup as root on a scheduled cron job, rclone writes the binary and then calls os.Chown to assign root ownership and os.Chmod to set the setuid bit verbatim. … |
| Remediation | Upgrade to rclone 1.74.4 or later; this release applies a sanitization mask to strip ModeSetuid and ModeSetgid bits before passing the mode value to os.Chmod, as confirmed by patch commit e58f09739a35774ca82b5211d2377ac0f2051500 and the upstream advisory at https://github.com/rclone/rclone/security/advisories/GHSA-945v-v9p3-v5xw. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
PowerShell smart-quote filename injection in rclone's SFTP backend allows an attacker who controls remote filenames to e
An issue was discovered in Rclone before 1.53.3. Rated high severity (CVSS 7.5), this vulnerability is remotely exploita
FTP CRLF injection in rclone before 1.75.0 allows an attacker who can place crafted filenames in a source namespace to i
Cleartext disclosure of AWS STS session tokens affects rclone before 1.74.4 when its S3 backend follows a redirect that
Path traversal in the `rclone serve restic --private-repos` REST server (versions prior to 1.74.4) allows an authenticat
Arbitrary file write via symlink traversal in Rclone prior to 1.74.4 lets an attacker-controlled remote escape the local
In Rclone 1.42, use of "rclone sync" to migrate data between two Google Cloud Storage buckets might allow attackers to t
Denial-of-service vulnerabilities in rclone's archive backend SquashFS parser allow an attacker with write access to rcl
Path traversal in rclone's serve s3 command (versions before 1.74.4) allows unauthenticated remote attackers to both rea
Unauthenticated credential exposure in rclone before 1.75.0 allows remote attackers to retrieve backend storage secrets
Credential exposure in rclone's WebDAV backend allows an adjacent on-path attacker to capture and replay Basic authentic
Credential exposure in rclone before v1.75.0 allows network-adjacent attackers to capture IBM IAM bearer tokens during s
Same technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today