This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2026-59732 | BDVDB-2026-348496 Detail

rclonerclone

Description#

Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.74.4, rclone archive extract can write extracted files outside the user-selected destination prefix when extracting a crafted archive containing parent path components such as ../, allowing creation or overwrite of sibling objects in the same bucket or path scope. This issue is fixed in version 1.74.4.

Impact#

Per CVSS v3.1: confidentiality impact none, integrity impact low, availability impact low. Attack vector: local.

Weaknesses#

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.