LOWVulnerability
CVE-2026-79783
rclone before 1.74.4 fails to mask special permission bits when applying source-supplied mode metadata in the local backend, allowing attackers to set setuid/setgid bits on attacker-controlled files. When copying with metadata preservation from an untrusted remote, attackers can plant a setuid binary that escalates privileges to root if rclone runs as root, or to the service account user otherwise.
Properties
- severity
- LOW
- score
- 3.6
- epss_score
- 0.0014
- cve_id
- CVE-2026-79783
- signal_observed_at
- 2026-09-15T21:12:47+00:00
- vector
- CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
- published_at
- 2026-08-25T16:17:30.383
- last_modified
- 2026-09-10T20:46:19.780
- epss_percentile
- 0.03733
Related Entities (3)
ENRICHED_BY (1)
→[Source]FIRST EPSS
DESCRIBED_BY (1)
→[Source]NVD
HAS_WEAKNESS (1)
→[Weakness]Incorrect Permission Assignment for Critical Resource
Explore deeper with Ninja Signal's threat intelligence graph