Search: CVE-2026-59733

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	–	EPSS 0.6%	CVE-2026-59733rclone `serve restic --private-repos` authorization bypass: `..` in the URL path lets an authenticated user read HighEPSS 0.6%2026-07-19GCVE DatabaseCVE-2026-59733 Rclone versions prior to 1.74.4 contain an authorization bypass vulnerability in the 'serve restic --private-repos' command. This flaw allows an authenticated user to use '..' path segments in the URL to access, modify, or delete another user's private repository on backends that normalize path components. The issue is resolved in version 1.74.4. EPSS 0.6%Vulnerability #bit-rclone-2026-59733 #bitnami	GCVE Database	2026-07-19

Page 1 of 1