CVE-2026-116187 | Rclone up to 1.75.1 Serve S3 Auth Proxy authorization

October 25, 2026 Yanac

A vulnerability, which was classified as critical, has been found in Rclone up to 1.75.1. This impacts an unknown function of the component Serve S3 Auth Proxy. This manipulation causes authorization bypass.

The identification of this vulnerability is CVE-2026-116187. It is possible to initiate the attack remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More