DEBIAN-CVE-2026-79777

See a problem?
Please try reporting it to the source first.

Source

https://security-tracker.debian.org/tracker/CVE-2026-79777

Import Source

https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-79777.json

JSON Data

https://api.osv.dev/v1/vulns/DEBIAN-CVE-2026-79777

Upstream

CVE-2026-79777

Published

2026-08-25T16:17:29Z

Modified

2026-09-11T08:47:43Z

Severity

5.1 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X CVSS Calculator

Summary

[none]

Details

rclone before v1.75.0 includes full Go stack traces in RC API error responses when panics occur. Attackers can trigger panics to leak internal file paths, module versions, goroutine states, and memory addresses.

References

https://security-tracker.debian.org/tracker/CVE-2026-79777

Affected packages

Debian:12 / rclone

Package

Name: rclone
Purl: pkg:deb/debian/rclone?arch=source&distro=bookworm

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.60.1+dfsg-2

1.60.1+dfsg-3

1.60.1+dfsg-4

1.65.0+dfsg-1

1.65.0+dfsg-2

1.69.3+dfsg-1

1.69.3+dfsg-2

1.69.3+dfsg-3

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-79777.json"

Debian:13 / rclone