{"schemaVersion":3,"id":"USN-8299-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"rclone vulnerabilities\n\nIt was discovered that Rclone incorrectly handled authorization in the remote\ncontrol API. An attacker could possibly use this issue to obtain sensitive\ninformation. (CVE-2026-41176)\n\nIt was discovered that Rclone incorrectly handled backend instantiation via the\nremote control API. An attacker could possibly use this issue to execute\narbitrary code. This issue only affected Ubuntu 24.04 LTS, Ubuntu 25.10 and\nUbuntu 26.04 LTS. (CVE-2026-41179)","dates":{"published":"2026-05-25T08:24:38.000Z","modified":"2026-06-30T18:16:24.754Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"rclone","name":"rclone","label":"rclone","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/rclone","purlType":"deb","versions":[{"text":"< 1.50.2-2ubuntu0.2+esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 1.53.3-4ubuntu1.22.04.4","noFixRecorded":false,"fixedIn":null},{"text":"< 1.60.1+dfsg-3ubuntu0.24.04.5","noFixRecorded":false,"fixedIn":null},{"text":"< 1.60.1+dfsg-4ubuntu2.1","noFixRecorded":false,"fixedIn":null},{"text":"< 1.60.1+dfsg-4ubuntu3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.50.2-2ubuntu0.2+esm1 | < 1.53.3-4ubuntu1.22.04.4 | < 1.60.1+dfsg-3ubuntu0.24.04.5 | < 1.60.1+dfsg-4ubuntu2.1 | < 1.60.1+dfsg-4ubuntu3.1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-8299-1","label":"ubuntu.com/security/notices/USN-8299-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-41176","label":"ubuntu.com/security/CVE-2026-41176","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2026-41179","label":"ubuntu.com/security/CVE-2026-41179","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CVE-2026-41176","CVE-2026-41179"]},"timeline":[{"kind":"published","date":"2026-05-25T08:24:38.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-06-30T18:16:24.754Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T14:31:50.865Z","stale":false,"partial":false}}