{"id":"EUVD-2026-65539","enisaUuid":"45b7202b-7aef-36d7-8c3c-83612c9a143a","description":"rclone serve s3 before 1.74.4 contains a path traversal vulnerability that allows attackers to read and overwrite root-level files by using dot-dot segments in S3 object keys. Attackers can send requests with object keys like ../root-secret.txt to escape the bucket namespace and access files in the serve root directory.","datePublished":"Aug 25, 2026, 3:16:10 PM","dateUpdated":"Aug 25, 2026, 5:29:20 PM","baseScore":6.9,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/rclone/rclone/security/advisories/GHSA-8v25-v8p6-qf7v\nhttps://www.vulncheck.com/advisories/rclone-serve-s3-path-traversal-via-dot-dot-object-keys\n","aliases":"CVE-2026-79781\nGHSA-98fh-ch8q-6529\n","assigner":"VulnCheck","epss":0.3,"enisaIdProduct":[{"id":"66d7b13e-3226-3b70-a797-91cd8dc76016","product":{"name":"rclone","vendor":{"name":"rclone"}},"product_version":"0 \u003c1.74.4"}],"enisaIdVendor":[{"id":"7134048b-b1c1-3f64-bf84-f4ccb103e32b","vendor":{"name":"rclone"}}],"enisaIdVulnerability":[{"id":"1bf2fa9a-5562-3b3f-b5fc-cd656dae351b","vulnerability":{"id":"GHSA-98fh-ch8q-6529","description":"rclone serve s3 before 1.74.4 contains a path traversal vulnerability that allows attackers to read and overwrite root-level files by using dot-dot segments in S3 object keys. Attackers can send requests with object keys like ../root-secret.txt to escape the bucket namespace and access files in the serve root directory.","datePublished":"Aug 25, 2026, 6:31:54 PM","dateUpdated":"Aug 25, 2026, 6:31:54 PM","baseScore":0.0,"references":"https://github.com/rclone/rclone/security/advisories/GHSA-8v25-v8p6-qf7v\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-79781\nhttps://www.vulncheck.com/advisories/rclone-serve-s3-path-traversal-via-dot-dot-object-keys\n","enisa_id":"EUVD-2026-65539\n","aliases":"CVE-2026-79781\nGHSA-98fh-ch8q-6529\n","epss":0.0,"dataProcessed":"Nov 9, 2026, 3:52:25 PM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"a5c6b810-7fca-3819-bb94-2e69c74d1201","vulnerability":{"id":"CVE-2026-79781","description":"rclone serve s3 before 1.74.4 contains a path traversal vulnerability that allows attackers to read and overwrite root-level files by using dot-dot segments in S3 object keys. Attackers can send requests with object keys like ../root-secret.txt to escape the bucket namespace and access files in the serve root directory.","datePublished":"Aug 25, 2026, 3:16:10 PM","dateUpdated":"Aug 25, 2026, 5:29:20 PM","status":"PUBLISHED","baseScore":6.9,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/rclone/rclone/security/advisories/GHSA-8v25-v8p6-qf7v\nhttps://www.vulncheck.com/advisories/rclone-serve-s3-path-traversal-via-dot-dot-object-keys\n","enisa_id":"EUVD-2026-65539\n","assigner":"VulnCheck","epss":0.3,"dataProcessed":"Nov 11, 2026, 7:20:46 AM","vulnerabilityProduct":[{"id":"6a5ea0e0-b57e-3c74-a0ff-5c1045034c9c","product":{"name":"rclone","vendor":{"name":"rclone"}},"product_version":"0 \u003c1.74.4"}],"vulnerabilityVendor":[{"id":"55801f82-3f75-3cbc-bbac-b64efbfdf1f7","vendor":{"name":"rclone"}}]}}],"enisaIdAdvisory":[]}