GO-2026-6187
FTP command injection via custom encoding in github.com/rclone/rclone
At a glance
- Published
- Updated
- CVE
- CVE-2026-71311
- Aliases
- BIT-rclone-2026-71311, GHSA-8c48-q9wj-3w37
Description
FTP command injection via custom encoding in github.com/rclone/rclone
Affected packages
| Package | Versions |
|---|---|
| Go · github.com/rclone/rclone | introduced 0, fixed 1.75.0 |
References
- https://github.com/rclone/rclone/security/advisories/GHSA-8c48-q9wj-3w37 ADVISORY
- https://github.com/rclone/rclone/commit/1df2b70753286c1dfe8366078cbedfdf7f96472c FIX
- https://github.com/rclone/rclone/releases/tag/v1.75.0 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |