CVE-2026-88014 | rclone up to 1.75.0 Archive ZIP Backend zip.go readZip path traversal

September 10, 2026 Yanac

A vulnerability classified as problematic has been found in rclone up to 1.75.0. Impacted is the function readZip of the file backend/archive/zip/zip.go of the component Archive ZIP Backend. This manipulation causes path traversal.

This vulnerability is handled as CVE-2026-88014. The attack can be initiated remotely. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More