CVE-2026-79781General

LOWCVSS 6.9 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

rclone serve s3 before 1.74.4 contains a path traversal vulnerability that allows attackers to read and overwrite root-level files by using dot-dot segments in S3 object keys. Attackers can send requests with object keys like ../root-secret.txt to escape the bucket namespace and access files in the serve root directory.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-22

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
General: 2 classified signals
Peaked 1d ago at 1 mentions (2026-08-25); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

General

2100.0%

Referenced assets3 URLs

By indicator

Full discourse2 posts

NewNormal Security@NewScanTeam45d
General
NewNormal Security turns the last 24 hours of CVEs into new detections, every day. 𝗗𝗮𝗶𝗹𝘆 𝗖𝗩𝗘 𝗥𝗲𝗽𝗼𝗿𝘁 — 26 Aug 2026 𝗔𝗹𝗿𝗲𝗮𝗱𝘆 𝗰𝗼𝘃𝗲𝗿𝗲𝗱 by NewScan: 🖥️ Exposed Go pprof debug endpoints — unauthenticated profiles can expose process memory, as seen in rclone CVE-2026-79776 𝗔𝗱𝗱𝗲𝗱 to NewScan today: 📦 Outdated rclone builds — version-gated checks for redirect credential leaks, path traversal, stack traces and WebDAV DoS, as seen in rclone CVE-2026-79782, CVE-2026-79781, CVE-2026-79780, CVE-2026-79779, CVE-2026-79778, CVE-2026-79777 Test your stack with NewScan — free, self-hosted: https://newnormalsecurity.com/newscan?utm_source=x&utm_medium=social&utm_campaign=daily-cve #infosec #AppSec #CredentialExposure #CSO #REDTEAM
Post summary
The post highlights several new CVEs affecting rclone’s debug endpoints and older builds, detailing potential exposures such as credential leaks and path traversal, without mentioning exploits or mitigations.
0000035
5 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds46d
General
CVE-2026-79781 Path Traversal in rclone serve s3 Before 1.74.4 Allows Fi... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-79781 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2
Post summary
A brief tweet linking to a vulnerability details page for CVE‑2026‑79781, noting a path traversal issue in rclone serve s3 <1.74.4, with no further technical or exploit details provided.
00000126
4.1K followersView on X

Explore more

Back to dashboard