CVE-2026-88018 | rclone up to 1.75.0 S3 Serve Authentication authPairMiddleware improper authentication

September 10, 2026 Yanac

A vulnerability was found in rclone up to 1.75.0. It has been classified as critical. This vulnerability affects the function authPairMiddleware of the component S3 Serve Authentication. Performing a manipulation results in improper authentication.

This vulnerability is identified as CVE-2026-88018. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More