BIT-rclone-2026-79777

See a problem?

Import Source

https://github.com/bitnami/vulndb/tree/main/data/rclone/BIT-rclone-2026-79777.json

JSON Data

https://api.osv.dev/v1/vulns/BIT-rclone-2026-79777

Aliases

Published

2026-09-25T12:30:09Z

Modified

2026-09-25T14:25:40Z

Summary

rclone before v1.75.0 Information Disclosure via RC API

Details

rclone before v1.75.0 includes full Go stack traces in RC API error responses when panics occur. Attackers can trigger panics to leak internal file paths, module versions, goroutine states, and memory addresses.

Database specific

{
    "cpes":  [
        "cpe:2.3:a:rclone:rclone:*:*:*:*:*:go:*:*"
    ],
    "severity":  "Medium"
}

References

Affected packages

Bitnami / rclone

Package

Name: rclone
Purl: pkg:bitnami/rclone

Severity

5.1 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X CVSS Calculator

Affected ranges

Type: SEMVER
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.75.0

Database specific

source

"https://github.com/bitnami/vulndb/tree/main/data/rclone/BIT-rclone-2026-79777.json"