CyberRota Analysis
AI-GeneratedRclone versions prior to 1.75.0 are vulnerable due to inadequate sanitization of IBM IAM bearer tokens and SSE-C encryption keys during S3 redirect callbacks, which can lead to credential leakage. This vulnerability allows attackers to capture reusable tokens during HTTPS-to-HTTP downgrades or cross-origin redirects, potentially granting unauthorized access to protected S3 objects. Organizations using rclone for S3 interactions, particularly those leveraging IBM IAM, should prioritize upgrading to mitigate the risk of credential exposure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
rclone before v1.75.0 fails to sanitize IBM IAM bearer tokens and SSE-C encryption keys during S3 redirect callbacks, allowing credentials to be preserved across scheme or host changes. Attackers observing network traffic from a trusted endpoint can capture reusable IBM IAM tokens on same-host HTTPS-to-HTTP downgrades or SSE-C keys on cross-origin redirects to access protected S3 objects.