CVE-2026-88017 | Rclone up to 1.64.0/1.75.0 FTP auth-proxy driver cmd/serve/ftp/ftp.go improper authorization

September 10, 2026 Yanac

A vulnerability was found in Rclone up to 1.64.0/1.75.0. It has been declared as problematic. This issue affects some unknown processing of the file cmd/serve/ftp/ftp.go of the component FTP auth-proxy driver. Executing a manipulation can lead to improper authorization.

This vulnerability is tracked as CVE-2026-88017. The attack can be launched remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More