Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.9
rclone could be exploited, update to latest version
published 14 days ago
Summary
The rclone file-sync tool contains a security weakness that could let an attacker interfere with data transfers. It has been fixed in newer releases, so you should upgrade to the latest version of rclone as soon as possible. Keeping the software up to date protects your systems from this risk.
What to do
- Update cleanstart rclone to version 1.71.2-r8.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | rclone |
< 1.71.2-r8 Fix: upgrade to 1.71.2-r8
|
Original advisory text
Security fix for GHSA-xmrv-pmrh-hhx2 applied in: rclone 1.71.2-r8
Security vulnerability affects the rclone package. This issue is resolved in later releases. See references for vulnerability details.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published22 Oct 2026
Updated22 Oct 2026
First seen22 Oct 2026
Sources
CLEANSTART-2026-XB95464 · OSV
Track software like this
Free during beta