GO-2026-6460
- Source
- https://pkg.go.dev/vuln/GO-2026-6460
- Import Source
- https://vuln.go.dev/ID/GO-2026-6460.json
- JSON Data
- https://api.osv.dev/v1/vulns/GO-2026-6460
- Aliases
- Published
- 2026-09-16T16:56:29Z
- Modified
- 2026-09-19T09:25:36Z
- Summary
- rclone: RC per-server auth-proxy bypass in github.com/rclone/rclone
- Details
-
rclone: RC per-server auth-proxy bypass in github.com/rclone/rclone
- Database specific
{ "review_status": "UNREVIEWED", "url": "https://pkg.go.dev/vuln/GO-2026-6460" }- References
Affected packages
Go / github.com/rclone/rclone
Package
- Name
- github.com/rclone/rclone
- View open source insights on deps.dev
- Purl
- pkg:golang/github.com/rclone/rclone
Ecosystem specific
{
"imports": [
{
"path": "github.com/rclone/rclone/cmd/serve/webdav",
"symbols": [
"FileInfo.ContentType",
"FileInfo.ETag",
"Handle.DeadProps",
"Handle.Patch",
"Handle.Readdir",
"WebDAV.Mkdir",
"WebDAV.OpenFile",
"WebDAV.RemoveAll",
"WebDAV.Rename",
"WebDAV.Serve",
"WebDAV.ServeHTTP",
"WebDAV.Shutdown",
"WebDAV.Stat",
"WebDAV.auth",
"WebDAV.getVFS",
"newWebDAV",
"webdavRW.WriteHeader"
]
},
{
"path": "github.com/rclone/rclone/cmd/serve/sftp",
"symbols": [
"AddFlags",
"listerat.ListAt",
"newServer",
"recoveringHandle.Close",
"recoveringHandle.ReadAt",
"recoveringHandle.WriteAt",
"server.Serve",
"server.Shutdown",
"server.configure",
"server.getVFS",
"vfsHandler.Filecmd",
"vfsHandler.Filelist",
"vfsHandler.Fileread",
"vfsHandler.Filewrite",
"vfsHandler.StatVFS"
]
},
{
"path": "github.com/rclone/rclone/cmd/serve/s3",
"symbols": [
"Server.Bind",
"Server.Serve",
"Server.Shutdown",
"Server.auth",
"Server.getVFS",
"logger.Print",
"newServer",
"readerWithCloser.Close",
"s3Backend.AbortMultipartUpload",
"s3Backend.BucketExists",
"s3Backend.CompleteMultipartUpload",
"s3Backend.CopyObject",
"s3Backend.CreateBucket",
"s3Backend.CreateMultipartUpload",
"s3Backend.DeleteBucket",
"s3Backend.DeleteMulti",
"s3Backend.DeleteObject",
"s3Backend.GetObject",
"s3Backend.HeadObject",
"s3Backend.ListBucket",
"s3Backend.ListBuckets",
"s3Backend.PutObject",
"s3Backend.TouchObject",
"s3Backend.UploadPart"
]
},
{
"path": "github.com/rclone/rclone/cmd/serve/proxy",
"symbols": [
"New"
]
},
{
"path": "github.com/rclone/rclone/cmd/serve/ftp",
"symbols": [
"AddFlags",
"FileInfo.Group",
"FileInfo.ModTime",
"FileInfo.Owner",
"Logger.Print",
"Logger.PrintCommand",
"Logger.PrintResponse",
"Logger.Printf",
"driver.Addr",
"driver.ChangeDir",
"driver.CheckPasswd",
"driver.DeleteDir",
"driver.DeleteFile",
"driver.GetFile",
"driver.ListDir",
"driver.MakeDir",
"driver.PutFile",
"driver.Rename",
"driver.Serve",
"driver.Shutdown",
"driver.Stat",
"driver.getVFS",
"newServer"
]
},
{
"path": "github.com/rclone/rclone/cmd/serve/http",
"symbols": [
"HTTP.Serve",
"HTTP.Shutdown",
"HTTP.auth",
"HTTP.getVFS",
"newServer"
]
}
]
}