GO-2026-6185
Path traversal via crafted archive paths in github.com/rclone/rclone
At a glance
- Published
- Updated
- CVE
- CVE-2026-59732
- Aliases
- BIT-rclone-2026-59732, GHSA-4vr5-p2gc-h23p
Description
Path traversal via crafted archive paths in github.com/rclone/rclone
Affected packages
| Package | Versions |
|---|---|
| Go · github.com/rclone/rclone | introduced 0, fixed 1.74.4 |
References
- https://github.com/rclone/rclone/security/advisories/GHSA-4vr5-p2gc-h23p ADVISORY
- https://github.com/rclone/rclone/commit/1a746732441e8158f32fab35924b23701e719a8c FIX
- https://github.com/rclone/rclone/commit/d11efe0d58fe6a2d6d90675bb9d8ee5840c51e1d FIX
- https://github.com/rclone/rclone/releases/tag/v1.74.4 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |