Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-116190

rclone from v1.56.0 before v1.75.2 contains an information disclosure vulnerability in the WebDAV backend that forwards operator-configured custom credential headers to different hosts on HTTP 3xx redirects. Attackers who control or influence a cross-host redirect can capture headers such as X-Auth-Token set via --webdav-headers and replay them against the original WebDAV service.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 8.5%
CVSS Severity
CVSS v3 Score 3.7
Products affected by CVE-2026-116190
  • Rclone » Rclone » Version: 1.56.0
    cpe:2.3:a:rclone:rclone:1.56.0
  • Rclone » Rclone » Version: 1.56.1
    cpe:2.3:a:rclone:rclone:1.56.1
  • Rclone » Rclone » Version: 1.56.2
    cpe:2.3:a:rclone:rclone:1.56.2
  • Rclone » Rclone » Version: 1.57.0
    cpe:2.3:a:rclone:rclone:1.57.0
  • Rclone » Rclone » Version: 1.58.0
    cpe:2.3:a:rclone:rclone:1.58.0
  • Rclone » Rclone » Version: 1.58.1
    cpe:2.3:a:rclone:rclone:1.58.1
  • Rclone » Rclone » Version: 1.59.0
    cpe:2.3:a:rclone:rclone:1.59.0
  • Rclone » Rclone » Version: 1.59.1
    cpe:2.3:a:rclone:rclone:1.59.1
  • Rclone » Rclone » Version: 1.59.2
    cpe:2.3:a:rclone:rclone:1.59.2
  • Rclone » Rclone » Version: 1.60.0
    cpe:2.3:a:rclone:rclone:1.60.0
  • Rclone » Rclone » Version: 1.60.1
    cpe:2.3:a:rclone:rclone:1.60.1
  • Rclone » Rclone » Version: 1.61.0
    cpe:2.3:a:rclone:rclone:1.61.0
  • Rclone » Rclone » Version: 1.61.1
    cpe:2.3:a:rclone:rclone:1.61.1
  • Rclone » Rclone » Version: 1.62.0
    cpe:2.3:a:rclone:rclone:1.62.0
  • Rclone » Rclone » Version: 1.62.1
    cpe:2.3:a:rclone:rclone:1.62.1
  • Rclone » Rclone » Version: 1.62.2
    cpe:2.3:a:rclone:rclone:1.62.2
  • Rclone » Rclone » Version: 1.63.0
    cpe:2.3:a:rclone:rclone:1.63.0
  • Rclone » Rclone » Version: 1.63.1
    cpe:2.3:a:rclone:rclone:1.63.1
  • Rclone » Rclone » Version: 1.64.0
    cpe:2.3:a:rclone:rclone:1.64.0
  • Rclone » Rclone » Version: 1.64.1
    cpe:2.3:a:rclone:rclone:1.64.1
  • Rclone » Rclone » Version: 1.64.2
    cpe:2.3:a:rclone:rclone:1.64.2
  • Rclone » Rclone » Version: 1.65.0
    cpe:2.3:a:rclone:rclone:1.65.0
  • Rclone » Rclone » Version: 1.65.1
    cpe:2.3:a:rclone:rclone:1.65.1
  • Rclone » Rclone » Version: 1.65.2
    cpe:2.3:a:rclone:rclone:1.65.2
  • Rclone » Rclone » Version: 1.66.0
    cpe:2.3:a:rclone:rclone:1.66.0
  • Rclone » Rclone » Version: 1.67.0
    cpe:2.3:a:rclone:rclone:1.67.0
  • Rclone » Rclone » Version: 1.68.0
    cpe:2.3:a:rclone:rclone:1.68.0
  • Rclone » Rclone » Version: 1.68.1
    cpe:2.3:a:rclone:rclone:1.68.1
  • Rclone » Rclone » Version: 1.68.2
    cpe:2.3:a:rclone:rclone:1.68.2
  • Rclone » Rclone » Version: 1.69.0
    cpe:2.3:a:rclone:rclone:1.69.0
  • Rclone » Rclone » Version: 1.69.1
    cpe:2.3:a:rclone:rclone:1.69.1
  • Rclone » Rclone » Version: 1.69.2
    cpe:2.3:a:rclone:rclone:1.69.2
  • Rclone » Rclone » Version: 1.69.3
    cpe:2.3:a:rclone:rclone:1.69.3
  • Rclone » Rclone » Version: 1.70.0
    cpe:2.3:a:rclone:rclone:1.70.0
  • Rclone » Rclone » Version: 1.70.1
    cpe:2.3:a:rclone:rclone:1.70.1
  • Rclone » Rclone » Version: 1.70.2
    cpe:2.3:a:rclone:rclone:1.70.2
  • Rclone » Rclone » Version: 1.70.3
    cpe:2.3:a:rclone:rclone:1.70.3
  • Rclone » Rclone » Version: 1.71.0
    cpe:2.3:a:rclone:rclone:1.71.0
  • Rclone » Rclone » Version: 1.71.1
    cpe:2.3:a:rclone:rclone:1.71.1
  • Rclone » Rclone » Version: 1.71.2
    cpe:2.3:a:rclone:rclone:1.71.2
  • Rclone » Rclone » Version: 1.72.0
    cpe:2.3:a:rclone:rclone:1.72.0
  • Rclone » Rclone » Version: 1.72.1
    cpe:2.3:a:rclone:rclone:1.72.1
  • Rclone » Rclone » Version: 1.73.0
    cpe:2.3:a:rclone:rclone:1.73.0
  • Rclone » Rclone » Version: 1.73.1
    cpe:2.3:a:rclone:rclone:1.73.1
  • Rclone » Rclone » Version: 1.73.2
    cpe:2.3:a:rclone:rclone:1.73.2
  • Rclone » Rclone » Version: 1.73.3
    cpe:2.3:a:rclone:rclone:1.73.3
  • Rclone » Rclone » Version: 1.73.4
    cpe:2.3:a:rclone:rclone:1.73.4
  • Rclone » Rclone » Version: 1.73.5
    cpe:2.3:a:rclone:rclone:1.73.5
  • Rclone » Rclone » Version: 1.74.0
    cpe:2.3:a:rclone:rclone:1.74.0
  • Rclone » Rclone » Version: 1.74.1
    cpe:2.3:a:rclone:rclone:1.74.1
  • Rclone » Rclone » Version: 1.74.2
    cpe:2.3:a:rclone:rclone:1.74.2
  • Rclone » Rclone » Version: 1.74.3
    cpe:2.3:a:rclone:rclone:1.74.3
  • Rclone » Rclone » Version: 1.74.4
    cpe:2.3:a:rclone:rclone:1.74.4
  • Rclone » Rclone » Version: 1.75.0
    cpe:2.3:a:rclone:rclone:1.75.0
  • Rclone » Rclone » Version: 1.75.1
    cpe:2.3:a:rclone:rclone:1.75.1


Products
Pricing
Contact Us

Shodan ® - All rights reserved