CVE-2026-88015 | Rclone up to 1.75.0 RangeOption lib/http/serve fs.RangeOption.Decode Home memory corruption

September 10, 2026 Yanac

A vulnerability classified as problematic was found in Rclone up to 1.75.0. This impacts the function fs.RangeOption.Decode of the file lib/http/serve of the component RangeOption. Executing a manipulation of the argument Home can lead to memory corruption.

This vulnerability is handled as CVE-2026-88015. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More