rclone EUVD-2026-83592

Requires an rclone instance running in rclone serve docker volume-plugin mode (a non-default deployment) with the privileged plugin process listening on its Docker volume-plugin socket. The attacker must be able to submit a VolumeDriver.Create request to that socket - normally the Docker daemon itself, or, in a multi-tenant orchestration environment, a workload permitted to request named volumes (hence PR:H, local/socket-scoped access). No user interaction is needed. Vulnerable only in versions 1.56.0 through 1.75.0; fixed in 1.75.1. Impact is constrained to privileged directory creation and remote-FS mounting at an arbitrary host path, not arbitrary code execution.

This is a genuine but bounded issue, correctly rated MEDIUM. The vendor CVSS 4.0 vector (AV:L/AC:L/PR:H/UI:N, VC:N/VI:L/VA:L, no scope change) scores 4.6, and the signals are internally consistent: the flaw is reachable only via the Docker VolumeDriver.Create request to the plugin's Unix socket, so the attacker must already be the Docker daemon or a workload permitted to request named volumes - hence local vector and high privilege. There is no EPSS score, no CISA KEV listing, and no public exploit code cited, so this is not a widespread-exploitation priority. Impact is limited to integrity/availability (privileged directory creation and remote-FS mount at an arbitrary host path, shadowing/disrupting system directories) with no direct confidentiality loss claimed. Note one defensible point of disagreement: because the mounted directory affects host paths outside the plugin's own tree, a case could be made for a scope change (CVSS 3.1 S:C / higher subsequent-system impact), but the practical risk remains gated behind PR:H, so overall priority stays moderate - patch on a normal cycle, prioritizing multi-tenant orchestration environments.

In a multi-tenant orchestration setup where an rclone Docker volume plugin is running privileged, an attacker who can submit a named-volume creation request supplies a volume name like '../../../../../../etc'. filepath.Join(drv.root, name) resolves outside /var/lib/docker-volumes/rclone, and the privileged plugin calls file.MkdirAll and mounts an attacker-specified remote filesystem over that host path, shadowing or disrupting a system directory. No public exploit code is identified at time of analysis; exploitation requires the ability to reach the plugin socket.