Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-116189

rclone from 1.55.0 before 1.75.2 contains a signature verification bypass in stable selfupdate that trusts checksums from unsigned bytes preceding the PGP-clearsigned SHA256SUMS block. Attackers controlling the release distribution path can prepend an unsigned checksum line matching a malicious archive, causing selfupdate to install an attacker-controlled rclone executable.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 4.1%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2026-116189
  • Rclone » Rclone » Version: 1.55.0
    cpe:2.3:a:rclone:rclone:1.55.0
  • Rclone » Rclone » Version: 1.55.1
    cpe:2.3:a:rclone:rclone:1.55.1
  • Rclone » Rclone » Version: 1.56.0
    cpe:2.3:a:rclone:rclone:1.56.0
  • Rclone » Rclone » Version: 1.56.1
    cpe:2.3:a:rclone:rclone:1.56.1
  • Rclone » Rclone » Version: 1.56.2
    cpe:2.3:a:rclone:rclone:1.56.2
  • Rclone » Rclone » Version: 1.57.0
    cpe:2.3:a:rclone:rclone:1.57.0
  • Rclone » Rclone » Version: 1.58.0
    cpe:2.3:a:rclone:rclone:1.58.0
  • Rclone » Rclone » Version: 1.58.1
    cpe:2.3:a:rclone:rclone:1.58.1
  • Rclone » Rclone » Version: 1.59.0
    cpe:2.3:a:rclone:rclone:1.59.0
  • Rclone » Rclone » Version: 1.59.1
    cpe:2.3:a:rclone:rclone:1.59.1
  • Rclone » Rclone » Version: 1.59.2
    cpe:2.3:a:rclone:rclone:1.59.2
  • Rclone » Rclone » Version: 1.60.0
    cpe:2.3:a:rclone:rclone:1.60.0
  • Rclone » Rclone » Version: 1.60.1
    cpe:2.3:a:rclone:rclone:1.60.1
  • Rclone » Rclone » Version: 1.61.0
    cpe:2.3:a:rclone:rclone:1.61.0
  • Rclone » Rclone » Version: 1.61.1
    cpe:2.3:a:rclone:rclone:1.61.1
  • Rclone » Rclone » Version: 1.62.0
    cpe:2.3:a:rclone:rclone:1.62.0
  • Rclone » Rclone » Version: 1.62.1
    cpe:2.3:a:rclone:rclone:1.62.1
  • Rclone » Rclone » Version: 1.62.2
    cpe:2.3:a:rclone:rclone:1.62.2
  • Rclone » Rclone » Version: 1.63.0
    cpe:2.3:a:rclone:rclone:1.63.0
  • Rclone » Rclone » Version: 1.63.1
    cpe:2.3:a:rclone:rclone:1.63.1
  • Rclone » Rclone » Version: 1.64.0
    cpe:2.3:a:rclone:rclone:1.64.0
  • Rclone » Rclone » Version: 1.64.1
    cpe:2.3:a:rclone:rclone:1.64.1
  • Rclone » Rclone » Version: 1.64.2
    cpe:2.3:a:rclone:rclone:1.64.2
  • Rclone » Rclone » Version: 1.65.0
    cpe:2.3:a:rclone:rclone:1.65.0
  • Rclone » Rclone » Version: 1.65.1
    cpe:2.3:a:rclone:rclone:1.65.1
  • Rclone » Rclone » Version: 1.65.2
    cpe:2.3:a:rclone:rclone:1.65.2
  • Rclone » Rclone » Version: 1.66.0
    cpe:2.3:a:rclone:rclone:1.66.0
  • Rclone » Rclone » Version: 1.67.0
    cpe:2.3:a:rclone:rclone:1.67.0
  • Rclone » Rclone » Version: 1.68.0
    cpe:2.3:a:rclone:rclone:1.68.0
  • Rclone » Rclone » Version: 1.68.1
    cpe:2.3:a:rclone:rclone:1.68.1
  • Rclone » Rclone » Version: 1.68.2
    cpe:2.3:a:rclone:rclone:1.68.2
  • Rclone » Rclone » Version: 1.69.0
    cpe:2.3:a:rclone:rclone:1.69.0
  • Rclone » Rclone » Version: 1.69.1
    cpe:2.3:a:rclone:rclone:1.69.1
  • Rclone » Rclone » Version: 1.69.2
    cpe:2.3:a:rclone:rclone:1.69.2
  • Rclone » Rclone » Version: 1.69.3
    cpe:2.3:a:rclone:rclone:1.69.3
  • Rclone » Rclone » Version: 1.70.0
    cpe:2.3:a:rclone:rclone:1.70.0
  • Rclone » Rclone » Version: 1.70.1
    cpe:2.3:a:rclone:rclone:1.70.1
  • Rclone » Rclone » Version: 1.70.2
    cpe:2.3:a:rclone:rclone:1.70.2
  • Rclone » Rclone » Version: 1.70.3
    cpe:2.3:a:rclone:rclone:1.70.3
  • Rclone » Rclone » Version: 1.71.0
    cpe:2.3:a:rclone:rclone:1.71.0
  • Rclone » Rclone » Version: 1.71.1
    cpe:2.3:a:rclone:rclone:1.71.1
  • Rclone » Rclone » Version: 1.71.2
    cpe:2.3:a:rclone:rclone:1.71.2
  • Rclone » Rclone » Version: 1.72.0
    cpe:2.3:a:rclone:rclone:1.72.0
  • Rclone » Rclone » Version: 1.72.1
    cpe:2.3:a:rclone:rclone:1.72.1
  • Rclone » Rclone » Version: 1.73.0
    cpe:2.3:a:rclone:rclone:1.73.0
  • Rclone » Rclone » Version: 1.73.1
    cpe:2.3:a:rclone:rclone:1.73.1
  • Rclone » Rclone » Version: 1.73.2
    cpe:2.3:a:rclone:rclone:1.73.2
  • Rclone » Rclone » Version: 1.73.3
    cpe:2.3:a:rclone:rclone:1.73.3
  • Rclone » Rclone » Version: 1.73.4
    cpe:2.3:a:rclone:rclone:1.73.4
  • Rclone » Rclone » Version: 1.73.5
    cpe:2.3:a:rclone:rclone:1.73.5
  • Rclone » Rclone » Version: 1.74.0
    cpe:2.3:a:rclone:rclone:1.74.0
  • Rclone » Rclone » Version: 1.74.1
    cpe:2.3:a:rclone:rclone:1.74.1
  • Rclone » Rclone » Version: 1.74.2
    cpe:2.3:a:rclone:rclone:1.74.2
  • Rclone » Rclone » Version: 1.74.3
    cpe:2.3:a:rclone:rclone:1.74.3
  • Rclone » Rclone » Version: 1.74.4
    cpe:2.3:a:rclone:rclone:1.74.4
  • Rclone » Rclone » Version: 1.75.0
    cpe:2.3:a:rclone:rclone:1.75.0
  • Rclone » Rclone » Version: 1.75.1
    cpe:2.3:a:rclone:rclone:1.75.1


Products
Pricing
Contact Us

Shodan ® - All rights reserved