Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
rclone before 1.74.4 fails to mask special permission bits when applying source-supplied mode metadata in the local backend, allowing attackers to set setuid/setgid bits on attacker-controlled files. When copying with metadata preservation from an untrusted remote, attackers can plant a setuid binary that escalates privileges to root if rclone runs as root, or to the service account user otherwise.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-79783 rclone Local Privilege Escalation via Setuid/Setgid Bits https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-79783
Post summary
A brief disclosure of a local privilege escalation vulnerability in rclone, highlighting Setuid/Setgid bits, is shared without any evidence of exploits, mitigation, or active attacks.