CVE-2026-54572

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-54572", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-06-15T19:15:27.343Z", "datePublished": "2026-07-14T21:37:41.882Z", "dateUpdated": "2026-07-15T12:43:01.494Z"}, "containers": {"cna": {"title": "rclone: Unvalidated symlink target in local `--links` \u2014 arbitrary file write from an untrusted remote", "problemTypes": [{"descriptions": [{"cweId": "CWE-59", "lang": "en", "description": "CWE-59: Improper Link Resolution Before File Access ('Link Following')", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:L", "version": "3.1"}}], "references": [{"name": "https://github.com/rclone/rclone/security/advisories/GHSA-cf44-9pgv-m4xc", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/rclone/rclone/security/advisories/GHSA-cf44-9pgv-m4xc"}, {"name": "https://github.com/rclone/rclone/commit/1154afebee986180b489084d38e2a0c578751498", "tags": ["x_refsource_MISC"], "url": "https://github.com/rclone/rclone/commit/1154afebee986180b489084d38e2a0c578751498"}, {"name": "https://github.com/rclone/rclone/commit/874a804f5289517defdd7de68b2a374837080265", "tags": ["x_refsource_MISC"], "url": "https://github.com/rclone/rclone/commit/874a804f5289517defdd7de68b2a374837080265"}, {"name": "https://github.com/rclone/rclone/releases/tag/v1.74.4", "tags": ["x_refsource_MISC"], "url": "https://github.com/rclone/rclone/releases/tag/v1.74.4"}], "affected": [{"vendor": "rclone", "product": "rclone", "versions": [{"version": "< 1.74.4", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-07-14T21:37:41.882Z"}, "descriptions": [{"lang": "en", "value": "Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.74.4, with -l/--links, rclone serializes symlinks as .rclonelink text objects and recreates them on a local destination without validating the target, allowing an attacker-controlled remote to plant an escaping symlink and cause a following object write to land outside the destination with attacker-chosen contents. This issue is fixed in version 1.74.4."}], "source": {"advisory": "GHSA-cf44-9pgv-m4xc", "discovery": "UNKNOWN"}}, "adp": [{"references": [{"url": "https://github.com/rclone/rclone/security/advisories/GHSA-cf44-9pgv-m4xc", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-07-15T12:42:05.766704Z", "id": "CVE-2026-54572", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-15T12:43:01.494Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-54572", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-15T12:42:05.766704Z"}}}], "references": [{"url": "https://github.com/rclone/rclone/security/advisories/GHSA-cf44-9pgv-m4xc", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-15T12:41:53.388Z"}}], "cna": {"title": "rclone: Unvalidated symlink target in local `--links` \u2014 arbitrary file write from an untrusted remote", "source": {"advisory": "GHSA-cf44-9pgv-m4xc", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}], "affected": [{"vendor": "rclone", "product": "rclone", "versions": [{"status": "affected", "version": "< 1.74.4"}]}], "references": [{"url": "https://github.com/rclone/rclone/security/advisories/GHSA-cf44-9pgv-m4xc", "name": "https://github.com/rclone/rclone/security/advisories/GHSA-cf44-9pgv-m4xc", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/rclone/rclone/commit/1154afebee986180b489084d38e2a0c578751498", "name": "https://github.com/rclone/rclone/commit/1154afebee986180b489084d38e2a0c578751498", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/rclone/rclone/commit/874a804f5289517defdd7de68b2a374837080265", "name": "https://github.com/rclone/rclone/commit/874a804f5289517defdd7de68b2a374837080265", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/rclone/rclone/releases/tag/v1.74.4", "name": "https://github.com/rclone/rclone/releases/tag/v1.74.4", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.74.4, with -l/--links, rclone serializes symlinks as .rclonelink text objects and recreates them on a local destination without validating the target, allowing an attacker-controlled remote to plant an escaping symlink and cause a following object write to land outside the destination with attacker-chosen contents. This issue is fixed in version 1.74.4."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-59", "description": "CWE-59: Improper Link Resolution Before File Access ('Link Following')"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-07-14T21:37:41.882Z"}}}, "cveMetadata": {"cveId": "CVE-2026-54572", "state": "PUBLISHED", "dateUpdated": "2026-07-15T12:43:01.494Z", "dateReserved": "2026-06-15T19:15:27.343Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-07-14T21:37:41.882Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "rclone", "vendor": "rclone", "versions": [{"status": "affected", "version": "< 1.74.4"}]}], "source": "security-advisories@github.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:rclone:rclone:*:*:*:*:*:*:*:*", "matchCriteriaId": "772F2000-4F9C-4DF7-ABE9-F30E43F058BF", "versionEndExcluding": "1.74.4", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.74.4, with -l/--links, rclone serializes symlinks as .rclonelink text objects and recreates them on a local destination without validating the target, allowing an attacker-controlled remote to plant an escaping symlink and cause a following object write to land outside the destination with attacker-chosen contents. This issue is fixed in version 1.74.4."}], "id": "CVE-2026-54572", "lastModified": "2026-07-17T03:13:56.627", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:L", "version": "3.1"}, "exploitabilityScore": 1.6, "impactScore": 5.3, "source": "security-advisories@github.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.3, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-54572", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-07-15T12:42:05.766704Z", "version": "2.0.3"}}]}, "published": "2026-07-14T22:17:16.533", "references": [{"source": "security-advisories@github.com", "tags": ["Patch"], "url": "https://github.com/rclone/rclone/commit/1154afebee986180b489084d38e2a0c578751498"}, {"source": "security-advisories@github.com", "tags": ["Patch"], "url": "https://github.com/rclone/rclone/commit/874a804f5289517defdd7de68b2a374837080265"}, {"source": "security-advisories@github.com", "tags": ["Release Notes"], "url": "https://github.com/rclone/rclone/releases/tag/v1.74.4"}, {"source": "security-advisories@github.com", "tags": ["Exploit", "Mitigation", "Vendor Advisory"], "url": "https://github.com/rclone/rclone/security/advisories/GHSA-cf44-9pgv-m4xc"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "tags": ["Exploit", "Mitigation", "Vendor Advisory"], "url": "https://github.com/rclone/rclone/security/advisories/GHSA-cf44-9pgv-m4xc"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-59"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{"bugzilla": {"description": "rclone: Rclone: Arbitrary file write via malicious symbolic link handling", "id": "2500758", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500758"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:L", "status": "draft"}, "cwe": "CWE-59", "details": ["Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.74.4, with -l/--links, rclone serializes symlinks as .rclonelink text objects and recreates them on a local destination without validating the target, allowing an attacker-controlled remote to plant an escaping symlink and cause a following object write to land outside the destination with attacker-chosen contents. This issue is fixed in version 1.74.4.", "A flaw was found in Rclone, a command-line program for syncing files with cloud storage. When handling symbolic links (symlinks) with the -l or --links option, Rclone serializes them as text objects and recreates them without proper validation. A remote attacker could exploit this by providing a malicious symlink, allowing subsequent file writes to occur outside the intended destination with content chosen by the attacker. This could lead to unauthorized modification of files on the system."], "mitigation": {"lang": "en:us", "value": "Upgrade to rclone 1.74.4 or later, which validates symlink targets before recreating them and rejects links that would escape the destination directory.\nIf an immediate upgrade is not possible, mitigate by avoiding the vulnerable code path:\ndo not use the -l/--links command-line option when syncing to or from a remote that is not fully trusted, since this is what enables rclone to serialize and recreate symlinks in the first place."}, "name": "CVE-2026-54572", "public_date": "2026-07-14T21:37:41Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-54572\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-54572\nhttps://github.com/rclone/rclone/commit/1154afebee986180b489084d38e2a0c578751498\nhttps://github.com/rclone/rclone/commit/874a804f5289517defdd7de68b2a374837080265\nhttps://github.com/rclone/rclone/releases/tag/v1.74.4\nhttps://github.com/rclone/rclone/security/advisories/GHSA-cf44-9pgv-m4xc"], "statement": "Rclone's -l/--links option serializes symbolic links encountered during a sync as `.rclonelink` text objects containing the link target, and later recreates those links on the destination. Prior to 1.74.4, rclone did not validate that a stored link target stays within the intended destination tree before recreating it. A remote storage backend under an attacker's control can therefore supply a crafted `.rclonelink` object whose target escapes the destination directory (e.g. via a `../` traversal or an absolute path), causing a subsequent write during the same or a later sync to be redirected outside the intended destination with attacker-chosen content.\nExploitation requires that the victim explicitly enable symlink handling (-l/--links) and initiate a sync against a remote the attacker can influence (e.g. a shared/untrusted cloud storage bucket, or a compromised legitimate remote); it is not exploitable against a default rclone configuration or against a fully trusted remote. This combination of required non-default configuration and required user-initiated action from an untrusted source is reflected in Red Hat's CVSS vector (AC:H, UI:R). The confidentiality impact is limited to what can be inferred from being able to overwrite files (e.g. tampering with a config file that is later read), while the primary impact is to integrity (arbitrary attacker-controlled file content written outside the sync destination) and, secondarily, availability (overwriting or corrupting files outside the destination).\nThis issue is corrected upstream in rclone 1.74.4, which validates a `.rclonelink` target stays within the destination before recreating it.", "threat_severity": "Important"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,1.74.4)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "rclone", "source": "cna", "vendor": "rclone"}, "product": "rclone", "vendor": "rclone"}], "created": "2026-07-15T14:45:03.223811+00:00", "updated": "2026-07-31T04:30:03.679863+00:00", "vendors": ["rclone", "rclone$PRODUCT$rclone"]}