CVE-2026-71309

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-71309", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-08-05T18:14:42.063Z", "datePublished": "2026-08-05T20:13:30.935Z", "dateUpdated": "2026-08-06T13:45:45.437Z"}, "containers": {"cna": {"title": "rclone: Incomplete path validation allows backend root escape in serve restic", "problemTypes": [{"descriptions": [{"cweId": "CWE-22", "lang": "en", "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "type": "CWE"}]}], "metrics": [{"cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "baseScore": 8.6, "baseSeverity": "HIGH", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N", "version": "4.0"}}], "references": [{"name": "https://github.com/rclone/rclone/security/advisories/GHSA-45pq-889g-fcgh", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/rclone/rclone/security/advisories/GHSA-45pq-889g-fcgh"}, {"name": "https://github.com/rclone/rclone/commit/cc5a189f00efe68ed0ddb32d3237b42549a9f264", "tags": ["x_refsource_MISC"], "url": "https://github.com/rclone/rclone/commit/cc5a189f00efe68ed0ddb32d3237b42549a9f264"}, {"name": "https://github.com/rclone/rclone/releases/tag/v1.75.0", "tags": ["x_refsource_MISC"], "url": "https://github.com/rclone/rclone/releases/tag/v1.75.0"}], "affected": [{"vendor": "rclone", "product": "rclone", "versions": [{"version": ">= 1.40.0, < 1.75.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-08-05T20:13:30.935Z"}, "descriptions": [{"lang": "en", "value": "rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.40.0 until 1.75.0, rclone serve restic does not correctly reject URL paths beginning with ../ in cmd/serve/restic/restic.go WithRemote, which accepts a leading parent path and passes it to GET, HEAD, POST, and DELETE handlers for configured backends including WebDAV, FTP, HTTP, Memory, and SFTP. An attacker who can access the REST endpoint may read, create, overwrite, or delete objects outside the path configured by the operator when the operator publishes a backend subdirectory and the backend credential can access parent or sibling objects. This issue is fixed in 1.75.0."}], "source": {"advisory": "GHSA-45pq-889g-fcgh", "discovery": "UNKNOWN"}}, "adp": [{"references": [{"url": "https://github.com/rclone/rclone/security/advisories/GHSA-45pq-889g-fcgh", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-06T13:45:25.528096Z", "id": "CVE-2026-71309", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-06T13:45:45.437Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-71309", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-08-06T13:45:25.528096Z"}}}], "references": [{"url": "https://github.com/rclone/rclone/security/advisories/GHSA-45pq-889g-fcgh", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-06T13:45:41.729Z"}}], "cna": {"title": "rclone: Incomplete path validation allows backend root escape in serve restic", "source": {"advisory": "GHSA-45pq-889g-fcgh", "discovery": "UNKNOWN"}, "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 8.6, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH"}}], "affected": [{"vendor": "rclone", "product": "rclone", "versions": [{"status": "affected", "version": ">= 1.40.0, < 1.75.0"}]}], "references": [{"url": "https://github.com/rclone/rclone/security/advisories/GHSA-45pq-889g-fcgh", "name": "https://github.com/rclone/rclone/security/advisories/GHSA-45pq-889g-fcgh", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/rclone/rclone/commit/cc5a189f00efe68ed0ddb32d3237b42549a9f264", "name": "https://github.com/rclone/rclone/commit/cc5a189f00efe68ed0ddb32d3237b42549a9f264", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/rclone/rclone/releases/tag/v1.75.0", "name": "https://github.com/rclone/rclone/releases/tag/v1.75.0", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.40.0 until 1.75.0, rclone serve restic does not correctly reject URL paths beginning with ../ in cmd/serve/restic/restic.go WithRemote, which accepts a leading parent path and passes it to GET, HEAD, POST, and DELETE handlers for configured backends including WebDAV, FTP, HTTP, Memory, and SFTP. An attacker who can access the REST endpoint may read, create, overwrite, or delete objects outside the path configured by the operator when the operator publishes a backend subdirectory and the backend credential can access parent or sibling objects. This issue is fixed in 1.75.0."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-22", "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-08-05T20:13:30.935Z"}}}, "cveMetadata": {"cveId": "CVE-2026-71309", "state": "PUBLISHED", "dateUpdated": "2026-08-06T13:45:45.437Z", "dateReserved": "2026-08-05T18:14:42.063Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-08-05T20:13:30.935Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "rclone", "vendor": "rclone", "versions": [{"status": "affected", "version": ">= 1.40.0, < 1.75.0"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.40.0 until 1.75.0, rclone serve restic does not correctly reject URL paths beginning with ../ in cmd/serve/restic/restic.go WithRemote, which accepts a leading parent path and passes it to GET, HEAD, POST, and DELETE handlers for configured backends including WebDAV, FTP, HTTP, Memory, and SFTP. An attacker who can access the REST endpoint may read, create, overwrite, or delete objects outside the path configured by the operator when the operator publishes a backend subdirectory and the backend credential can access parent or sibling objects. This issue is fixed in 1.75.0."}], "id": "CVE-2026-71309", "lastModified": "2026-09-09T20:50:00.950", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 8.6, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-71309", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-08-06T13:45:25.528096Z", "version": "2.0.3"}}]}, "published": "2026-08-05T21:16:58.383", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/rclone/rclone/commit/cc5a189f00efe68ed0ddb32d3237b42549a9f264"}, {"source": "security-advisories@github.com", "url": "https://github.com/rclone/rclone/releases/tag/v1.75.0"}, {"source": "security-advisories@github.com", "url": "https://github.com/rclone/rclone/security/advisories/GHSA-45pq-889g-fcgh"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "url": "https://github.com/rclone/rclone/security/advisories/GHSA-45pq-889g-fcgh"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{"bugzilla": {"description": "github.com/rclone/rclone: rclone: Backend Root Escape via Incomplete Path Validation", "id": "2511774", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2511774"}, "csaw": false, "cvss3": {"cvss3_base_score": "8.1", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "status": "draft"}, "cwe": "CWE-22", "details": ["A flaw was found in rclone. The `rclone serve restic` component, which handles cloud storage operations, contains an incomplete path validation vulnerability. An attacker with access to the REST endpoint can exploit this by using specially crafted URL paths containing directory traversal sequences (e.g., `../`). This allows the attacker to read, create, overwrite, or delete objects outside the intended directory, leading to unauthorized data manipulation and a potential escape from the configured backend root."], "mitigation": {"lang": "en:us", "value": "do not expose rclone serve restic\nto untrusted clients; bind it to trusted networks only, and avoid publishing a\nbackend subdirectory when the backend credential can also access parent or\nsibling objects. Prefer serving the exact backend root you intend to expose."}, "name": "CVE-2026-71309", "package_state": [{"cpe": "cpe:/a:redhat:acm:2", "fix_state": "Not affected", "package_name": "rhacm2/volsync-rhel9", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2"}], "public_date": "2026-08-05T20:13:30Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-71309\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-71309\nhttps://github.com/rclone/rclone/commit/cc5a189f00efe68ed0ddb32d3237b42549a9f264\nhttps://github.com/rclone/rclone/releases/tag/v1.75.0\nhttps://github.com/rclone/rclone/security/advisories/GHSA-45pq-889g-fcgh"], "statement": "This flaw is rated as Important. The `rclone serve restic` command, when exposed, is vulnerable to directory traversal due to incomplete path validation. An authenticated attacker with network access to the REST endpoint can read, create, overwrite, or delete objects outside the operator's configured path, leading to data compromise or integrity issues. This vulnerability requires the `rclone serve restic` feature to be actively used and accessible.", "threat_severity": "Important"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[1.40.0,1.75.0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "rclone", "source": "cna", "vendor": "rclone"}, "product": "rclone", "vendor": "rclone"}], "created": "2026-08-05T21:30:16.208371+00:00", "updated": "2026-08-05T21:30:16.325058+00:00", "vendors": ["rclone", "rclone$PRODUCT$rclone"]}