rclone before v1.75.0 Credential Exposure via S3 Redirect

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-79780 · Microsoft / collected KEV context

EUVD-2026-65538

GHSA-fj78-v5f5-cphq

GHSA-8mxv-9xhp-86h4

BIT-rclone-2026-79780

GO-2026-6188

cve-program · CVE-2026-79780

• https://github.com/rclone/rclone/security/advisories/GHSA-8mxv-9xhp-86h4
• https://www.vulncheck.com/advisories/rclone-before-credential-exposure-via-s3-redirect

euvd · EUVD-2026-65538

• https://github.com/rclone/rclone/security/advisories/GHSA-8mxv-9xhp-86h4
• https://www.vulncheck.com/advisories/rclone-before-credential-exposure-via-s3-redirect

nvd · CVE-2026-79780

• https://github.com/rclone/rclone/security/advisories/GHSA-8mxv-9xhp-86h4
• https://www.vulncheck.com/advisories/rclone-before-credential-exposure-via-s3-redirect

osv · GHSA-8mxv-9xhp-86h4

• https://github.com/rclone/rclone/security/advisories/GHSA-8mxv-9xhp-86h4
• https://github.com/rclone/rclone/commit/7543a7a87884aca957590b20b0714078d51af87b
• https://github.com/rclone/rclone/commit/9328763d1b73db71e97c0332b19e3747abeb9191
• https://github.com/rclone/rclone
• https://github.com/rclone/rclone/releases/tag/v1.75.0

osv · GO-2026-6188

• https://github.com/rclone/rclone/security/advisories/GHSA-8mxv-9xhp-86h4
• https://github.com/rclone/rclone/commit/7543a7a87884aca957590b20b0714078d51af87b
• https://github.com/rclone/rclone/commit/9328763d1b73db71e97c0332b19e3747abeb9191
• https://github.com/rclone/rclone/releases/tag/v1.75.0

No related operational record is retained in the current change model.