CVE-2026-79777
Last modified
CVE-2026-79777 is a low-severity vulnerability rated 2.7/10 on the CVSS scale. rclone before v1.75.0 includes full Go stack traces in RC API error responses when panics occur. Attackers can trigger panics to leak internal file paths, module versions, goroutine states, and memory addresses.. EPSS estimates a 0.24% chance of exploitation in the next 30 days.
Description
rclone before v1.75.0 includes full Go stack traces in RC API error responses when panics occur. Attackers can trigger panics to leak internal file paths, module versions, goroutine states, and memory addresses.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| rclone | rclone | < 1.75.0 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-79777?
How severe is CVE-2026-79777?
How do I fix CVE-2026-79777?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-79771Nokogiri versions before 1.19.3 contain a memory leak in the…5.3
- CVE-2026-79772Nokogiri versions before 1.19.1 fail to check the return val…5.3
- CVE-2026-79773Winter CMS before 1.2.13 contains a local file inclusion vul…4.9
- CVE-2026-79774Winter CMS versions before 1.2.13 contain an incomplete fix …8.4
- CVE-2026-79775rclone versions >= v1.72.0 and <= v1.74.4 (fixed in v1.75.0)…6.5
- CVE-2026-79776rclone before 1.75.0 mounts the pprof debug handler as its o…5.3
- CVE-2026-79778rclone before v1.75.0 contains a denial of service vulnerabi…5.3
- CVE-2026-79779rclone versions before v1.75.0 fail to reject transport down…5.3
- CVE-2026-7978Inappropriate implementation in Companion in Google Chrome o…8.1
- CVE-2026-79780rclone before v1.75.0 fails to sanitize IBM IAM bearer token…5.3
- CVE-2026-79781rclone serve s3 before 1.74.4 contains a path traversal vuln…6.5
- CVE-2026-79782rclone before 1.74.4 fails to strip the X-Amz-Security-Token…3.1
Are you affected by CVE-2026-79777?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST