Zurück zur CVE-Übersicht
CVE-2026-116189
HIGH(7.5)CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Risk Signal Score19/100 — NIEDRIG
- CVSS 7.5 — Hoch
Erwähnungen (letzte 60 Tage)
Artikel
EPSS-Score
0.1%
Exploit-Wahrscheinlichkeit (30 Tage)
CVSS Score
7.5
Technische Schwere
Beschreibung
rclone from 1.55.0 before 1.75.2 contains a signature verification bypass in stable selfupdate that trusts checksums from unsigned bytes preceding the PGP-clearsigned SHA256SUMS block. Attackers controlling the release distribution path can prepend an unsigned checksum line matching a malicious archive, causing selfupdate to install an attacker-controlled rclone executable.
Betroffene Produkte
- cpe:2.3:a:rclone:rclone:*:*:*:*:*:*:*:*