rclone: FTP cross-session auth-proxy backend confusion

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2026-88017 · CVE overview and exploitation status

EUVD-2026-75577

GHSA-c476-6w5q-jw77

BIT-rclone-2026-88017

GO-2026-6458

cve-program · CVE-2026-88017

• https://github.com/rclone/rclone/security/advisories/GHSA-c476-6w5q-jw77
• https://github.com/rclone/rclone/commit/c6af0b57c2b4af848bc968c2b407354476184b99
• https://github.com/rclone/rclone/releases/tag/v1.75.1

euvd · EUVD-2026-75577

• https://github.com/rclone/rclone/security/advisories/GHSA-c476-6w5q-jw77
• https://github.com/rclone/rclone/commit/c6af0b57c2b4af848bc968c2b407354476184b99
• https://github.com/rclone/rclone/releases/tag/v1.75.1

nvd · CVE-2026-88017

• https://github.com/rclone/rclone/commit/c6af0b57c2b4af848bc968c2b407354476184b99
• https://github.com/rclone/rclone/releases/tag/v1.75.1
• https://github.com/rclone/rclone/security/advisories/GHSA-c476-6w5q-jw77

osv · GHSA-c476-6w5q-jw77

• https://github.com/rclone/rclone/security/advisories/GHSA-c476-6w5q-jw77
• https://nvd.nist.gov/vuln/detail/CVE-2026-88017
• https://github.com/rclone/rclone/commit/c6af0b57c2b4af848bc968c2b407354476184b99
• https://github.com/rclone/rclone
• https://github.com/rclone/rclone/releases/tag/v1.75.1

osv · GO-2026-6458

• https://github.com/rclone/rclone/security/advisories/GHSA-c476-6w5q-jw77
• https://nvd.nist.gov/vuln/detail/CVE-2026-88017
• https://github.com/rclone/rclone/commit/c6af0b57c2b4af848bc968c2b407354476184b99
• https://github.com/rclone/rclone/releases/tag/v1.75.1

No related changes are available here.