TI-2026-60066 Aliases CVE-2026-88046 GHSA-38xv-hf3p-h7mq

rclone: source object names can escape the configured root on upload

LOW 24CWE-22Published 2026-09-10 · Updated 2026-09-15

Key facts

Attack vector: Network
Privileges required: None
User interaction: Required
Attack complexity: High
Impact type: —
Confidentiality · integrity · availability: None · High · None
Fix status: Partial Red Hat: 2 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub and Red Hat.

Summary

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, rclone core does not reject parent-directory segments in source Object.Remote() values before fs/list, fs/walk, fs/sync, and fs/operations pass those values to destination backends. A flat-keyspace source object store populated with native non-rclone tooling can contain a raw .. key segment, and affected b2, swift, qingstor, oracleobjectstorage, internetarchive, smb, storj, sftp, webdav, ftp, filelu, shade, and sia destinations use path.Join(root, remote) before EncodeDot can neutralize the segment. A copy or upload can therefore escape the configured root into another bucket, share, or path reachable by the victim credential, with sftp and smb potentially reaching other filesystem or share locations under the same login authority. This issue is fixed in version 1.75.1.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00294 22nd percentileScored 2026-11-07

Fix Partial rclone (rclone): 1.75.1github.com/rclone/rclone (Go): 1.75.1Red Hat: 2 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
rclone	rclone	before 1.75.1	1.75.1	Patch available	CNA
—	github.com/rclone/rclone (Go)	before 1.75.1	1.75.1	Patch available	GHSA-38xv-hf3p-h7mq

rclone Vendorrclone Affected before 1.75.1 Fixed in 1.75.1 Patch available CNA
github.com/rclone/rclone (Go) Vendor— Affected before 1.75.1 Fixed in 1.75.1 Patch available GHSA-38xv-hf3p-h7mq

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPE	Versions	Role	Vendor
cpe:2.3:a:rclone:rclone::::::::	—	—	rclone

cpe:2.3:a:rclone:rclone:*:*:*:*:*:*:*:* Versions — — ·rclone

Remediation

Fix · CNA rclone (rclone) Fixed in 1.75.1
Fix · GHSA-38xv-hf3p-h7mq github.com/rclone/rclone (Go) Fixed in 1.75.1 Advisory →

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Product	Status	Plan or fix
Cryostat 4	Affected	No fix yet: Fix deferred
Red Hat Advanced Cluster Management for Kubernetes 2	Affected	No fix yet: Fix deferred

Timeline

2026-10-02 Threatist record created from CVE-2026-88046
2026-10-03 Alias added: GHSA-38xv-hf3p-h7mq

References

Advisory 1

https://nvd.nist.gov/vuln/detail/CVE-2026-88046

Other 4

TI-2026-60044 rclone serve s3: --auth-proxy without --auth-key authenticates nobody - full SigV4 signature bypass CVSS 3.1CRITICAL 9.8
TI-2026-29802 RClone: Unauthenticated operations/fsinfo allows attacker-controlled backend instantiation and local command execution CVSS 4.0CRITICAL 9.2
TI-2026-29799 Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution CVSS 4.0CRITICAL 9.2
TI-2026-60064 rclone: RC per-server auth-proxy bypass CVSS 3.1CRITICAL 9.1
TI-2026-42602 Path traversal in rclone CVSS 3.1HIGH 8.8
TI-2026-60065 rclone: S3 multipart declared-length memory exhaustion CVSS 3.1HIGH 7.5

See all 43 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences