CVE-2026-116194 | Rclone up to 1.75.1 pCloud backend hostname cross-site request forgery

October 25, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in Rclone up to 1.75.1. Affected by this issue is some unknown functionality of the component pCloud backend. Performing a manipulation of the argument Hostname results in cross-site request forgery.

This vulnerability was named CVE-2026-116194. The attack may be initiated remotely. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More