EUVD-2026-75576
GHSA-f8g7-2xjc-7mfh
Severity by source
AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:L
AV:N because sync source is typically a remote endpoint; AC:H for non-default --links flag and two-phase exploit setup; PR:L since attacker must control source storage; UI:R as the victim must initiate the sync; S:C for out-of-destination metadata writes.
Primary rating from Vendor (GitHub_M).
CVSS VectorVendor: GitHub_M
Lifecycle Timeline
6DescriptionCVE.org
rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, when backend/local runs with --links, a source .rclonelink object can plant a symlink in the destination and later directory metadata is applied through that path. MkdirMetadata, writeMetadataToFile, and setTimes operate when Directory.translatedLink=false, so os.Chown, os.Chmod, os.Chtimes, and birth-time handling can bypass os.Root confinement and follow the symlink. An attacker controlling source contents can therefore apply selected ownership, permissions, modification times, or birth times to a file or directory outside the destination, with --metadata required for chmod and chown while modification time is applied by the normal directory workflow. This issue is fixed in version 1.75.1.
AnalysisAI
Symlink escape in rclone's local backend (prior to v1.75.1) allows an attacker who controls sync source contents to apply metadata - ownership, permissions, or timestamps - to files and directories outside the intended destination root. When --links is enabled, a crafted .rclonelink entry plants a symlink in the destination; subsequent metadata routines (MkdirMetadata, writeMetadataToFile, setTimes) incorrectly skip the symlink guard and call os.Chown, os.Chmod, os.Chtimes, and birth-time syscalls through the planted link, bypassing os.Root confinement. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires all of the following to be true simultaneously: (1) the `--links` flag must be passed to rclone - this is non-default and not present in standard sync invocations; (2) the attacker must control the sync source contents, meaning they have write access to the remote storage provider or bucket being synced from; (3) a user must initiate the sync operation (UI:R); (4) for `chown` and `chmod` escapes, `--metadata` must additionally be enabled; modification-time escape occurs without `--metadata` via the normal directory sync workflow. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 7.1 vector (AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:L) correctly captures the multi-step exploitation chain: network-sourced attack, high complexity due to non-default flags and two-phase exploitation, low-privilege attacker controlling source storage, and required user interaction to initiate the sync. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Vendor-released patch: rclone v1.75.1, available at https://github.com/rclone/rclone/releases/tag/v1.75.1. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: inventory all rclone installations and identify which are using the --links flag, particularly with untrusted or external sync sources. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Authentication bypass in rclone's S3 server mode (rclone serve s3) allows any unauthenticated network attacker to impers
PowerShell smart-quote filename injection in rclone's SFTP backend allows an attacker who controls remote filenames to e
An issue was discovered in Rclone before 1.53.3. Rated high severity (CVSS 7.5), this vulnerability is remotely exploita
Cross-session credential isolation failure in rclone's FTP auth-proxy driver (versions 1.64.0-1.75.0) allows an authenti
FTP CRLF injection in rclone before 1.75.0 allows an attacker who can place crafted filenames in a source namespace to i
Path traversal in rclone prior to 1.75.1 allows an attacker who can populate a source object store with raw `..` key seg
Cleartext disclosure of AWS STS session tokens affects rclone before 1.74.4 when its S3 backend follows a redirect that
Authentication/authorization bypass in rclone's dynamic serve interface (versions 1.70.0 through 1.75.0) lets remote att
Path traversal in the `rclone serve restic --private-repos` REST server (versions prior to 1.74.4) allows an authenticat
Arbitrary file write via symlink traversal in Rclone prior to 1.74.4 lets an attacker-controlled remote escape the local
Memory exhaustion in rclone 1.75.0's serve S3 multipart upload handler allows remote attackers to exhaust process or hos
In Rclone 1.42, use of "rclone sync" to migrate data between two Google Cloud Storage buckets might allow attackers to t
Same weakness CWE-59 – Improper Link Resolution Before File Access
View allShare
External POC / Exploit Code
Leaving vuln.today