CVE-2026-79782Disclosure

LOWCVSS 9.3 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

rclone before 1.74.4 fails to strip the X-Amz-Security-Token header when an S3 redirect changes scheme from HTTPS to HTTP on the same host. Attackers can intercept plaintext HTTP traffic to capture AWS STS session tokens sent in request headers.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-319

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 1 classified signal
General: 1 classified signal
Peaked 1d ago at 1 mentions (2026-08-25); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification2 categories

Disclosure

150.0%

General

150.0%

Referenced assets2 URLs

By indicator

Classification over time

Date	Total	Labels

2026-08-25	1	Disclosure1
2026-08-27	1	General1

Full discourse2 posts

NewNormal Security@NewScanTeam45d
General
NewNormal Security turns the last 24 hours of CVEs into new detections, every day. 𝗗𝗮𝗶𝗹𝘆 𝗖𝗩𝗘 𝗥𝗲𝗽𝗼𝗿𝘁 — 26 Aug 2026 𝗔𝗹𝗿𝗲𝗮𝗱𝘆 𝗰𝗼𝘃𝗲𝗿𝗲𝗱 by NewScan: 🖥️ Exposed Go pprof debug endpoints — unauthenticated profiles can expose process memory, as seen in rclone CVE-2026-79776 𝗔𝗱𝗱𝗲𝗱 to NewScan today: 📦 Outdated rclone builds — version-gated checks for redirect credential leaks, path traversal, stack traces and WebDAV DoS, as seen in rclone CVE-2026-79782, CVE-2026-79781, CVE-2026-79780, CVE-2026-79779, CVE-2026-79778, CVE-2026-79777 Test your stack with NewScan — free, self-hosted: https://newnormalsecurity.com/newscan?utm_source=x&utm_medium=social&utm_campaign=daily-cve #infosec #AppSec #CredentialExposure #CSO #REDTEAM
Post summary
NewNormal Security releases a daily report of recently identified CVEs, detailing issues such as exposed Go pprof endpoints and rclone build vulnerabilities, and promotes testing with their free NewScan tool.
0000035
5 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds46d
Disclosure
CVE-2026-79782 AWS STS Token Exposure in rclone Before 1.74.4 via HTTP Redirect https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-79782
Post summary
The post announces CVE‑2026‑79782, describing a token exposure issue in rclone versions prior to 1.74.4 caused by an HTTP redirect, with no further details on exploits or mitigations.
00000130
4.1K followersView on X

Explore more

Back to dashboard