Search: CVE-2026-41176

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	–	EPSS 32%	CVE-2026-41176Rclone · Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution CriticalEPSS 32%2026-04-24GCVE DatabaseCVE-2026-41176 Rclone versions from 1.45.0 up to but not including 1.73.5 contain a critical vulnerability in the Remote Control (RC) server. The exposed RC endpoint 'options/set' lacks authentication enforcement, allowing unauthenticated attackers to disable authorization for other RC methods. This enables unauthorized access to sensitive administrative functions and potentially command execution. The vulnerability is patched in version 1.73.5. EPSS 32%Vulnerability #bit-rclone-2026-41176 #bitnami	GCVE Database	2026-04-24

Page 1 of 1