rclone before 1.75.1 fails to confine names from server and third-party listing responses to the listed directory, allowing path traversal sequences in object names.
Last checked: 2026-09-22 21:40 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-09-21 16:22 UTC)
Fix evidence last checked: 2026-09-23 11:19 UTC