VULNERABILITY INTELLIGENCE
CVE-2026-79777
CVSS score2.7 LOW
EPSS probability0.30%
CISA KEVNot currently listed
Published2026-08-25
Last modified2026-09-10
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Description
rclone before v1.75.0 includes full Go stack traces in RC API error responses when panics occur. Attackers can trigger panics to leak internal file paths, module versions, goroutine states, and memory addresses.
Weakness classification
- disclosure@vulncheck.com: CWE-209