CyberRota Analysis
AI-GeneratedRclone versions prior to 1.74.4 are vulnerable to a path traversal flaw in the `rclone serve restic --private-repos` feature, allowing authenticated users to manipulate backend object keys and potentially access, modify, or delete other users' private repositories. This vulnerability poses a significant risk to data integrity and confidentiality, particularly for organizations relying on Rclone for cloud storage synchronization. Users of Rclone, especially those managing sensitive data in private repositories, should prioritize upgrading to version 1.74.4 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.74.4, rclone serve restic --private-repos enforces authorization using the routed user path segment while building the backend object key from the raw uncleaned URL path, allowing an authenticated user to include .. in a request such as //..//config and read, overwrite, or delete another user's private repository on backends that clean path components. This issue is fixed in version 1.74.4.
Related CVEs
Other vulnerabilities affecting the same vendor(s)