rclone serve s3: --auth-proxy without --auth-key authenticates nobody - full SigV4 signature bypass

Rclone: Unauthenticated command execution in `rclone rcd --rc-serve` via inline remote instantiation, bypassing CVE-2026-41179 fix

RClone: Unauthenticated operations/fsinfo allows attacker-controlled backend instantiation and local command execution

Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution

rclone: RC per-server auth-proxy bypass

rclone `serve restic --private-repos` authorization bypass: `..` in the URL path lets an authenticated user read, overwrite and delete other users' repositories

rclone: Unvalidated symlink target in local `--links` — arbitrary file write from an untrusted remote

rclone: Incomplete path validation allows backend root escape in serve restic

rclone: PowerShell Smart-Quote Filename Injection Enables SFTP Server-Side Command Execution

Rclone before 1.75.2 Path Traversal via serve webdav MKCOL

rclone 1.55.0 before 1.75.2 selfupdate Signature Verification Bypass via SHA256SUMS

rclone: S3 multipart declared-length memory exhaustion

An issue was discovered in Rclone before 1.53.3

In Rclone 1.42, use of "rclone sync" to migrate data between two Google Cloud Storage buckets might allow attackers to trigger the transmission of any URL's content to Google,…

rclone: FTP cross-session auth-proxy backend confusion

rclone: Directory metadata (chmod/chown/chtimes) applied through a planted symlink in rclone local --links escapes the destination

rclone: Local Encoding Path Traversal

Rclone 1.52.0 before 1.75.2 CSRF via pCloud OAuth Callback

rclone serve s3 Path Traversal via dot-dot object keys

rclone Archive Backend SquashFS Parser Denial of Service

rclone: FTP Command Arguments Permit CRLF Injection When Custom Encoding Preserves Newlines

rclone archive/zip: Zip Slip via unsanitized zip entry names lets a malicious archive escape its own namespace

Rclone before 1.75.2 Path Traversal via translateLink .rclonelink Suffix Trim

rclone from 1.37 before 1.74.2 SSRF via --rc-serve scheme-relative remote roots

rclone: Unbounded HTTP CONNECT Response Headers Can Exhaust rclone Memory

Rclone before v1.75.2 B2 Credential Leak on Redirect via --b2-download-url

Rclone 1.64.0 before 1.75.2 serve webdav Authentication Bypass via OPTIONS Requests

rclone serve s3 1.75.0 before 1.75.2 Memory Limit Bypass via Multipart Overflow

rclone: source object names can escape the configured root on upload

rclone local: crafted Range request against a translated symlink panics (DoS)

rclone: http backend forwards custom/auth headers to a different host on redirect

rclone before v1.75.0 Credential Exposure via S3 Redirect

rclone before v1.75.0 WebDAV Credential Exposure via HTTPS-to-HTTP Redirect

rclone before v1.75.0 Denial of Service via TUS nil-response panic

rclone before 1.75.0 Authentication Bypass via pprof

Rclone v1.68.0 before v1.75.2 Authorization Bypass in serve s3 Multipart Uploads

rclone archive extract allows S3 destination prefix escape via crafted archive paths

rclone v1.56.0 before v1.75.2 WebDAV Credential Header Leak on Redirect

rclone before 1.74.4 Privilege Escalation via setuid Metadata

rclone serve docker Path Traversal via Volume Name

rclone before 1.75.1 Path Traversal via Directory Listing Names

rclone before 1.74.4 Security Token Disclosure via HTTPS to HTTP Redirect

rclone before v1.75.0 Information Disclosure via RC API