CVE-2026-41176 | Rclone up to 1.73.4 RC Endpoint options/set missing authentication (GHSA-25qr-6mpr-f7qx)

April 23, 2026 Yanac

A vulnerability marked as critical has been reported in Rclone up to 1.73.4. Affected is an unknown function of the file options/set of the component RC Endpoint. This manipulation causes missing authentication.

This vulnerability appears as CVE-2026-41176. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More