Zurück zur CVE-Übersicht
CVE-2026-116187
MEDIUM(5.0)CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L
Risk Signal Score13/100 — NIEDRIG
- CVSS 5 — Mittel
Erwähnungen (letzte 60 Tage)
Artikel
EPSS-Score
0.1%
Exploit-Wahrscheinlichkeit (30 Tage)
CVSS Score
5
Technische Schwere
Beschreibung
Rclone from v1.68.0 before v1.75.2 contains an authorization bypass vulnerability in serve s3 --auth-proxy that allows authenticated tenants to manipulate other tenants' multipart uploads by referencing their upload IDs. Attackers who learn a victim's bucket, object, and upload ID can inject parts, complete, or abort in-flight uploads and view upload and object metadata across tenants.
Betroffene Produkte
- cpe:2.3:a:rclone:rclone:*:*:*:*:*:*:*:*