Threats tagged 'bit-rclone-2026-41176'

Rclone versions from 1.45.0 up to but not including 1.73.5 contain a critical vulnerability in the Remote Control (RC) server. The exposed RC endpoint 'options/set' lacks authentication enforcement, allowing unauthenticated attackers to disable authorization for other RC methods. This enables unauthorized access to sensitive administrative functions and potentially command execution. The vulnerability is patched in version 1.73.5.