LOWVulnerability

CVE-2026-79783

rclone before 1.74.4 fails to mask special permission bits when applying source-supplied mode metadata in the local backend, allowing attackers to set setuid/setgid bits on attacker-controlled files. When copying with metadata preservation from an untrusted remote, attackers can plant a setuid binary that escalates privileges to root if rclone runs as root, or to the service account user otherwise.

Properties

severity
LOW
score
3.6
epss_score
0.0014
cve_id
CVE-2026-79783
signal_observed_at
2026-09-15T21:12:47+00:00
vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
published_at
2026-08-25T16:17:30.383
last_modified
2026-09-10T20:46:19.780
epss_percentile
0.03733

Related Entities (3)

ENRICHED_BY (1)

[Source]FIRST EPSS

DESCRIBED_BY (1)

[Source]NVD

HAS_WEAKNESS (1)

[Weakness]Incorrect Permission Assignment for Critical Resource

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-79783 — Ninja Signal Threat Intelligence | Ninja Signal