Read the docs
TI-2026-49967 Aliases CVE-2026-71309GHSA-45pq-889g-fcgh

rclone: Incomplete path validation allows backend root escape in serve restic

Priority HIGH 72CWE-22Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
High · High · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub.

Summary

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.40.0 until 1.75.0, rclone serve restic does not correctly reject URL paths beginning with ../ in cmd/serve/restic/restic.go WithRemote, which accepts a leading parent path and passes it to GET, HEAD, POST, and DELETE handlers for configured backends including WebDAV, FTP, HTTP, Memory, and SFTP. An attacker who can access the REST endpoint may read, create, overwrite, or delete objects outside the path configured by the operator when the operator publishes a backend subdirectory and the backend credential can access parent or sibling objects. This issue is fixed in 1.75.0.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00459 39th percentileScored 2026-11-07
Fix Fixed rclone (rclone): 1.75.0github.com/rclone/rclone (Go): 1.75.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
rclonerclone1.40.0 to before 1.75.01.75.0Patch availableCNA
—github.com/rclone/rclone (Go)1.40.0 to before 1.75.01.75.0Patch availableGHSA-45pq-889g-fcgh
  • rclone Vendorrclone Affected 1.40.0 to before 1.75.0 Fixed in 1.75.0 Patch available CNA
  • github.com/rclone/rclone (Go) Vendor— Affected 1.40.0 to before 1.75.0 Fixed in 1.75.0 Patch available GHSA-45pq-889g-fcgh

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPEVersionsRoleVendor
cpe:2.3:a:rclone:rclone:*:*:*:*:*:*:*:*——rclone
  • cpe:2.3:a:rclone:rclone:*:*:*:*:*:*:*:* Versions — — ·rclone

Remediation

  • Fix · CNA rclone (rclone) Fixed in 1.75.0
  • Fix · GHSA-45pq-889g-fcgh github.com/rclone/rclone (Go) Fixed in 1.75.0 Advisory →

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat Advanced Cluster Management for Kubernetes 2

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-71309
  2. 2026-10-03 Alias added: GHSA-45pq-889g-fcgh

References

Other 4

  • TI-2026-60044 rclone serve s3: --auth-proxy without --auth-key authenticates nobody - full SigV4 signature bypass CVSS 3.1CRITICAL 9.8
  • TI-2026-29802 RClone: Unauthenticated operations/fsinfo allows attacker-controlled backend instantiation and local command execution CVSS 4.0CRITICAL 9.2
  • TI-2026-29799 Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution CVSS 4.0CRITICAL 9.2
  • TI-2026-60064 rclone: RC per-server auth-proxy bypass CVSS 3.1CRITICAL 9.1
  • TI-2026-42602 Path traversal in rclone CVSS 3.1HIGH 8.8
  • TI-2026-60065 rclone: S3 multipart declared-length memory exhaustion CVSS 3.1HIGH 7.5
See all 43 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences