rclone rclone

Name: rclone rclone
Brand: rclone

productUS

cpe:2.3:a:rclone:rclone:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

2critical3high1medium0low

updated 2026-10-23

vulnerabilities (14)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-41179US	critical9.8OT high	5.30% (93rd)	Exploit	1.73.5	2026-04-23	1.48.0 → 1.73.5
CVE-2026-41176US	critical9.8OT elevated	3.22% (88th)	—	1.73.5	2026-04-23	1.45 → 1.73.5
CVE-2020-28924US	high7.5	1.36% (72nd)	—	1.53.3	2020-11-19	< 1.53.3
CVE-2018-12907US	high7.5	1.31% (70th)	—	no fix	2018-06-27	= 1.42
CVE-2026-49980US	—OT elevated	0.78% (55th)	—	1.74.3	2026-06-24	1.46 → 1.74.3
CVE-2026-59733US	—	0.55% (45th)	—	1.74.4	2026-07-14	< 1.74.4
CVE-2026-88018US	—OT elevated	0.51% (43rd)	—	1.75.1	2026-09-10	< 1.75.1
CVE-2026-54572US	high8.8	0.40% (34th)	—	1.74.4	2026-07-14	< 1.74.4
CVE-2026-88015US	—	0.36% (28th)	—	1.75.1	2026-09-10	< 1.75.1
CVE-2026-59732US	—	0.26% (17th)	—	1.74.4	2026-07-14	< 1.74.4
CVE-2026-88017US	—	0.23% (14th)	—	1.75.1	2026-09-10	1.64.0 → 1.75.1
CVE-2026-88013US	medium5.3OT elevated	0.19% (8th)	—	1.75.1	2026-09-10	1.49.0 → 1.75.1
CVE-2026-88016US	—	0.19% (8th)	—	1.75.1	2026-09-10	< 1.75.1
CVE-2026-88014US	—	0.15% (4th)	—	1.75.1	2026-09-10	1.72.0 → 1.75.1

The flaw types (CWEs) most of these CVEs share.

CWE-306Missing Authentication for Critical Function4 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-59Improper Link Resolution Before File Access ('Link Following')2 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2 CVEs
CWE-15External Control of System or Configuration Setting1 CVEs
CWE-190Integer Overflow or Wraparound1 CVEs
CWE-248Uncaught Exception1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.