Rclone versions prior to 1.75.2 have a path traversal vulnerability in the serve webdav feature. This flaw allows unauthenticated attackers to write files outside the intended served root directory by using an unvalidated '..' path component. Exploitation involves sending MKCOL /.. to create a virtual file system node, followed by PUT, MOVE, COPY, or MKCOL requests to manipulate files belonging to other tenants.