Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-59733

Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.74.4, rclone serve restic --private-repos enforces authorization using the routed user path segment while building the backend object key from the raw uncleaned URL path, allowing an authenticated user to include .. in a request such as //..//config and read, overwrite, or delete another user's private repository on backends that clean path components. This issue is fixed in version 1.74.4.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 42.5%
CVSS Severity
CVSS v3 Score 8.8
Products affected by CVE-2026-59733
  • Rclone » Rclone » Version: 0.90
    cpe:2.3:a:rclone:rclone:0.90
  • Rclone » Rclone » Version: 0.91
    cpe:2.3:a:rclone:rclone:0.91
  • Rclone » Rclone » Version: 0.92
    cpe:2.3:a:rclone:rclone:0.92
  • Rclone » Rclone » Version: 0.93
    cpe:2.3:a:rclone:rclone:0.93
  • Rclone » Rclone » Version: 0.94
    cpe:2.3:a:rclone:rclone:0.94
  • Rclone » Rclone » Version: 0.95
    cpe:2.3:a:rclone:rclone:0.95
  • Rclone » Rclone » Version: 0.96
    cpe:2.3:a:rclone:rclone:0.96
  • Rclone » Rclone » Version: 0.97
    cpe:2.3:a:rclone:rclone:0.97
  • Rclone » Rclone » Version: 0.98
    cpe:2.3:a:rclone:rclone:0.98
  • Rclone » Rclone » Version: 0.99
    cpe:2.3:a:rclone:rclone:0.99
  • Rclone » Rclone » Version: 1.00
    cpe:2.3:a:rclone:rclone:1.00
  • Rclone » Rclone » Version: 1.01
    cpe:2.3:a:rclone:rclone:1.01
  • Rclone » Rclone » Version: 1.02
    cpe:2.3:a:rclone:rclone:1.02
  • Rclone » Rclone » Version: 1.03
    cpe:2.3:a:rclone:rclone:1.03
  • Rclone » Rclone » Version: 1.04
    cpe:2.3:a:rclone:rclone:1.04
  • Rclone » Rclone » Version: 1.05
    cpe:2.3:a:rclone:rclone:1.05
  • Rclone » Rclone » Version: 1.06
    cpe:2.3:a:rclone:rclone:1.06
  • Rclone » Rclone » Version: 1.07
    cpe:2.3:a:rclone:rclone:1.07
  • Rclone » Rclone » Version: 1.08
    cpe:2.3:a:rclone:rclone:1.08
  • Rclone » Rclone » Version: 1.09
    cpe:2.3:a:rclone:rclone:1.09
  • Rclone » Rclone » Version: 1.10
    cpe:2.3:a:rclone:rclone:1.10
  • Rclone » Rclone » Version: 1.11
    cpe:2.3:a:rclone:rclone:1.11
  • Rclone » Rclone » Version: 1.12
    cpe:2.3:a:rclone:rclone:1.12
  • Rclone » Rclone » Version: 1.13
    cpe:2.3:a:rclone:rclone:1.13
  • Rclone » Rclone » Version: 1.14
    cpe:2.3:a:rclone:rclone:1.14
  • Rclone » Rclone » Version: 1.15
    cpe:2.3:a:rclone:rclone:1.15
  • Rclone » Rclone » Version: 1.16
    cpe:2.3:a:rclone:rclone:1.16
  • Rclone » Rclone » Version: 1.17
    cpe:2.3:a:rclone:rclone:1.17
  • Rclone » Rclone » Version: 1.18
    cpe:2.3:a:rclone:rclone:1.18
  • Rclone » Rclone » Version: 1.19
    cpe:2.3:a:rclone:rclone:1.19
  • Rclone » Rclone » Version: 1.20
    cpe:2.3:a:rclone:rclone:1.20
  • Rclone » Rclone » Version: 1.21
    cpe:2.3:a:rclone:rclone:1.21
  • Rclone » Rclone » Version: 1.22
    cpe:2.3:a:rclone:rclone:1.22
  • Rclone » Rclone » Version: 1.23
    cpe:2.3:a:rclone:rclone:1.23
  • Rclone » Rclone » Version: 1.24
    cpe:2.3:a:rclone:rclone:1.24
  • Rclone » Rclone » Version: 1.25
    cpe:2.3:a:rclone:rclone:1.25
  • Rclone » Rclone » Version: 1.26
    cpe:2.3:a:rclone:rclone:1.26
  • Rclone » Rclone » Version: 1.27
    cpe:2.3:a:rclone:rclone:1.27
  • Rclone » Rclone » Version: 1.28
    cpe:2.3:a:rclone:rclone:1.28
  • Rclone » Rclone » Version: 1.29
    cpe:2.3:a:rclone:rclone:1.29
  • Rclone » Rclone » Version: 1.30
    cpe:2.3:a:rclone:rclone:1.30
  • Rclone » Rclone » Version: 1.31
    cpe:2.3:a:rclone:rclone:1.31
  • Rclone » Rclone » Version: 1.32
    cpe:2.3:a:rclone:rclone:1.32
  • Rclone » Rclone » Version: 1.33
    cpe:2.3:a:rclone:rclone:1.33
  • Rclone » Rclone » Version: 1.34
    cpe:2.3:a:rclone:rclone:1.34
  • Rclone » Rclone » Version: 1.35
    cpe:2.3:a:rclone:rclone:1.35
  • Rclone » Rclone » Version: 1.36
    cpe:2.3:a:rclone:rclone:1.36
  • Rclone » Rclone » Version: 1.37
    cpe:2.3:a:rclone:rclone:1.37
  • Rclone » Rclone » Version: 1.38
    cpe:2.3:a:rclone:rclone:1.38
  • Rclone » Rclone » Version: 1.39
    cpe:2.3:a:rclone:rclone:1.39
  • Rclone » Rclone » Version: 1.40
    cpe:2.3:a:rclone:rclone:1.40
  • Rclone » Rclone » Version: 1.41
    cpe:2.3:a:rclone:rclone:1.41
  • Rclone » Rclone » Version: 1.42
    cpe:2.3:a:rclone:rclone:1.42
  • Rclone » Rclone » Version: 1.43
    cpe:2.3:a:rclone:rclone:1.43
  • Rclone » Rclone » Version: 1.43.1
    cpe:2.3:a:rclone:rclone:1.43.1
  • Rclone » Rclone » Version: 1.44
    cpe:2.3:a:rclone:rclone:1.44
  • Rclone » Rclone » Version: 1.45
    cpe:2.3:a:rclone:rclone:1.45
  • Rclone » Rclone » Version: 1.46
    cpe:2.3:a:rclone:rclone:1.46
  • Rclone » Rclone » Version: 1.47.0
    cpe:2.3:a:rclone:rclone:1.47.0
  • Rclone » Rclone » Version: 1.48.0
    cpe:2.3:a:rclone:rclone:1.48.0
  • Rclone » Rclone » Version: 1.49.0
    cpe:2.3:a:rclone:rclone:1.49.0
  • Rclone » Rclone » Version: 1.49.1
    cpe:2.3:a:rclone:rclone:1.49.1
  • Rclone » Rclone » Version: 1.49.2
    cpe:2.3:a:rclone:rclone:1.49.2
  • Rclone » Rclone » Version: 1.49.3
    cpe:2.3:a:rclone:rclone:1.49.3
  • Rclone » Rclone » Version: 1.49.4
    cpe:2.3:a:rclone:rclone:1.49.4
  • Rclone » Rclone » Version: 1.49.5
    cpe:2.3:a:rclone:rclone:1.49.5
  • Rclone » Rclone » Version: 1.50.0
    cpe:2.3:a:rclone:rclone:1.50.0
  • Rclone » Rclone » Version: 1.50.1
    cpe:2.3:a:rclone:rclone:1.50.1
  • Rclone » Rclone » Version: 1.50.2
    cpe:2.3:a:rclone:rclone:1.50.2
  • Rclone » Rclone » Version: 1.51.0
    cpe:2.3:a:rclone:rclone:1.51.0
  • Rclone » Rclone » Version: 1.52.0
    cpe:2.3:a:rclone:rclone:1.52.0
  • Rclone » Rclone » Version: 1.52.1
    cpe:2.3:a:rclone:rclone:1.52.1
  • Rclone » Rclone » Version: 1.52.2
    cpe:2.3:a:rclone:rclone:1.52.2
  • Rclone » Rclone » Version: 1.52.3
    cpe:2.3:a:rclone:rclone:1.52.3
  • Rclone » Rclone » Version: 1.53.0
    cpe:2.3:a:rclone:rclone:1.53.0
  • Rclone » Rclone » Version: 1.53.1
    cpe:2.3:a:rclone:rclone:1.53.1
  • Rclone » Rclone » Version: 1.53.2
    cpe:2.3:a:rclone:rclone:1.53.2
  • Rclone » Rclone » Version: 1.53.3
    cpe:2.3:a:rclone:rclone:1.53.3
  • Rclone » Rclone » Version: 1.53.4
    cpe:2.3:a:rclone:rclone:1.53.4
  • Rclone » Rclone » Version: 1.54.0
    cpe:2.3:a:rclone:rclone:1.54.0
  • Rclone » Rclone » Version: 1.54.1
    cpe:2.3:a:rclone:rclone:1.54.1
  • Rclone » Rclone » Version: 1.55.0
    cpe:2.3:a:rclone:rclone:1.55.0
  • Rclone » Rclone » Version: 1.55.1
    cpe:2.3:a:rclone:rclone:1.55.1
  • Rclone » Rclone » Version: 1.56.0
    cpe:2.3:a:rclone:rclone:1.56.0
  • Rclone » Rclone » Version: 1.56.1
    cpe:2.3:a:rclone:rclone:1.56.1
  • Rclone » Rclone » Version: 1.56.2
    cpe:2.3:a:rclone:rclone:1.56.2
  • Rclone » Rclone » Version: 1.57.0
    cpe:2.3:a:rclone:rclone:1.57.0
  • Rclone » Rclone » Version: 1.58.0
    cpe:2.3:a:rclone:rclone:1.58.0
  • Rclone » Rclone » Version: 1.58.1
    cpe:2.3:a:rclone:rclone:1.58.1
  • Rclone » Rclone » Version: 1.59.0
    cpe:2.3:a:rclone:rclone:1.59.0
  • Rclone » Rclone » Version: 1.59.1
    cpe:2.3:a:rclone:rclone:1.59.1
  • Rclone » Rclone » Version: 1.59.2
    cpe:2.3:a:rclone:rclone:1.59.2
  • Rclone » Rclone » Version: 1.60.0
    cpe:2.3:a:rclone:rclone:1.60.0
  • Rclone » Rclone » Version: 1.60.1
    cpe:2.3:a:rclone:rclone:1.60.1
  • Rclone » Rclone » Version: 1.61.0
    cpe:2.3:a:rclone:rclone:1.61.0
  • Rclone » Rclone » Version: 1.61.1
    cpe:2.3:a:rclone:rclone:1.61.1
  • Rclone » Rclone » Version: 1.62.0
    cpe:2.3:a:rclone:rclone:1.62.0
  • Rclone » Rclone » Version: 1.62.1
    cpe:2.3:a:rclone:rclone:1.62.1
  • Rclone » Rclone » Version: 1.62.2
    cpe:2.3:a:rclone:rclone:1.62.2
  • Rclone » Rclone » Version: 1.63.0
    cpe:2.3:a:rclone:rclone:1.63.0
  • Rclone » Rclone » Version: 1.63.1
    cpe:2.3:a:rclone:rclone:1.63.1
  • Rclone » Rclone » Version: 1.64.0
    cpe:2.3:a:rclone:rclone:1.64.0
  • Rclone » Rclone » Version: 1.64.1
    cpe:2.3:a:rclone:rclone:1.64.1
  • Rclone » Rclone » Version: 1.64.2
    cpe:2.3:a:rclone:rclone:1.64.2
  • Rclone » Rclone » Version: 1.65.0
    cpe:2.3:a:rclone:rclone:1.65.0
  • Rclone » Rclone » Version: 1.65.1
    cpe:2.3:a:rclone:rclone:1.65.1
  • Rclone » Rclone » Version: 1.65.2
    cpe:2.3:a:rclone:rclone:1.65.2
  • Rclone » Rclone » Version: 1.66.0
    cpe:2.3:a:rclone:rclone:1.66.0
  • Rclone » Rclone » Version: 1.67.0
    cpe:2.3:a:rclone:rclone:1.67.0
  • Rclone » Rclone » Version: 1.68.0
    cpe:2.3:a:rclone:rclone:1.68.0
  • Rclone » Rclone » Version: 1.68.1
    cpe:2.3:a:rclone:rclone:1.68.1
  • Rclone » Rclone » Version: 1.68.2
    cpe:2.3:a:rclone:rclone:1.68.2
  • Rclone » Rclone » Version: 1.69.0
    cpe:2.3:a:rclone:rclone:1.69.0
  • Rclone » Rclone » Version: 1.69.1
    cpe:2.3:a:rclone:rclone:1.69.1
  • Rclone » Rclone » Version: 1.69.2
    cpe:2.3:a:rclone:rclone:1.69.2
  • Rclone » Rclone » Version: 1.69.3
    cpe:2.3:a:rclone:rclone:1.69.3
  • Rclone » Rclone » Version: 1.70.0
    cpe:2.3:a:rclone:rclone:1.70.0
  • Rclone » Rclone » Version: 1.70.1
    cpe:2.3:a:rclone:rclone:1.70.1
  • Rclone » Rclone » Version: 1.70.2
    cpe:2.3:a:rclone:rclone:1.70.2
  • Rclone » Rclone » Version: 1.70.3
    cpe:2.3:a:rclone:rclone:1.70.3
  • Rclone » Rclone » Version: 1.71.0
    cpe:2.3:a:rclone:rclone:1.71.0
  • Rclone » Rclone » Version: 1.71.1
    cpe:2.3:a:rclone:rclone:1.71.1
  • Rclone » Rclone » Version: 1.71.2
    cpe:2.3:a:rclone:rclone:1.71.2
  • Rclone » Rclone » Version: 1.72.0
    cpe:2.3:a:rclone:rclone:1.72.0
  • Rclone » Rclone » Version: 1.72.1
    cpe:2.3:a:rclone:rclone:1.72.1
  • Rclone » Rclone » Version: 1.73.0
    cpe:2.3:a:rclone:rclone:1.73.0
  • Rclone » Rclone » Version: 1.73.1
    cpe:2.3:a:rclone:rclone:1.73.1
  • Rclone » Rclone » Version: 1.73.2
    cpe:2.3:a:rclone:rclone:1.73.2
  • Rclone » Rclone » Version: 1.73.3
    cpe:2.3:a:rclone:rclone:1.73.3
  • Rclone » Rclone » Version: 1.73.4
    cpe:2.3:a:rclone:rclone:1.73.4
  • Rclone » Rclone » Version: 1.73.5
    cpe:2.3:a:rclone:rclone:1.73.5
  • Rclone » Rclone » Version: 1.74.0
    cpe:2.3:a:rclone:rclone:1.74.0
  • Rclone » Rclone » Version: 1.74.1
    cpe:2.3:a:rclone:rclone:1.74.1
  • Rclone » Rclone » Version: 1.74.2
    cpe:2.3:a:rclone:rclone:1.74.2
  • Rclone » Rclone » Version: 1.74.3
    cpe:2.3:a:rclone:rclone:1.74.3


Products
Pricing
Contact Us

Shodan ® - All rights reserved