{"id":"CVE-2026-116191","kind":"vulnerability","aliases":["CVE-2026-116191"],"related":[],"title":"Rclone: WebDAV path traversal lets unauthenticated users write outside served root","description":"Rclone before 1.75.2 contains a path traversal vulnerability in serve webdav that allows unauthenticated attackers to write above the served root by sending an unvalidated '..' path component. Attackers can send MKCOL /.. to plant a VFS node, then PUT, MOVE, COPY, or MKCOL to create, overwrite, or delete files belonging to other tenants.","summary":"Rclone before 1.75.2 does not validate '..' path components in its serve webdav mode. An unauthenticated attacker can create, overwrite, or delete files outside the served root, including files belonging to other tenants.","severity":"high","cvss":8.7,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["multi-tenant","package","rclone","self-hosted","webdav"],"not_affected_if":["client-only-use","no-webdav-serve"],"how_to_check":"- Run `rclone version` and compare against `1.75.2`.\n- Check whether the service is started with `rclone serve webdav` and whether it is reachable from untrusted networks.","fix":"- Upgrade rclone to `1.75.2` or later.\n- Until upgraded, stop exposing `rclone serve webdav` to untrusted networks.","status":"open","published_at":"2026-10-25T14:16:59+00:00","first_seen_at":"2026-10-25T14:41:23+00:00","triaged_at":"2026-10-25T14:42:13+00:00","updated_at":"2026-10-25T14:42:13+00:00","category":"package","confidence":0.7,"triage":{"at":"2026-10-25T14:42:13Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade rclone to `1.75.2` or later.\n- Until upgraded, stop exposing `rclone serve webdav` to untrusted networks.","reach":"internet","title":"Rclone: WebDAV path traversal lets unauthenticated users write outside served root","impact":"high","summary":"Rclone before 1.75.2 does not validate '..' path components in its serve webdav mode. An unauthenticated attacker can create, overwrite, or delete files outside the served root, including files belonging to other tenants.","category":"package","nicknames":[],"who_cares":["rclone","self-hosted","webdav","multi-tenant"],"confidence":0.7,"needs_auth":"no","worst_case":"Attacker overwrites or deletes other tenants' files outside the served root","analyst_note":"Confirm the affected version range and whether the fix in 1.75.2 is the only remediation; check the NVD entry and rclone release notes for details.","how_to_check":"- Run `rclone version` and compare against `1.75.2`.\n- Check whether the service is started with `rclone serve webdav` and whether it is reachable from untrusted networks.","needs_analyst":true,"not_affected_if":["client-only-use","no-webdav-serve"],"who_is_affected":"Teams running rclone's `serve webdav` mode that accept requests from users or networks outside their trust boundary, especially multi-tenant setups sharing one served root. Installations that only use rclone as a client, or serve WebDAV only to trusted local users, are less exposed. The sources do not say whether authentication settings change exposure.","user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"high"},"cost_usd":0.000623,"input_tokens":3349,"output_tokens":577,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-116191':14A,17A '-2026':13A,16A '/..':90C '1.75.2':29B,61C 'allow':71C 'attack':42B,73C,86C 'belong':55B,108C 'compon':34B,85C 'contain':62C 'copi':99C 'creat':44B,103C 'cve':12A,15A 'delet':47B,106C 'file':48B,54B,107C 'host':25B 'includ':53B 'let':5A 'mkcol':89C,101C 'mode':39B 'move':98C 'multi':19B 'multi-ten':18B 'node':95C 'outsid':9A,49B 'overwrit':45B,104C 'packag':21B 'path':3A,33B,64C,84C 'plant':92C 'put':97C 'rclone':1A,22B,27B,59C 'root':11A,52B,79C 'self':24B 'self-host':23B 'send':81C,88C 'serv':10A,37B,51B,68C,78C 'tenant':20B,58B,111C 'travers':4A,65C 'unauthent':6A,41B,72C 'unvalid':83C 'user':7A 'valid':32B 'vfs':94C 'vulner':66C 'webdav':2A,26B,38B,69C 'write':8A,75C","nicknames":[],"mitigations":[],"who_affected":"Teams running rclone's `serve webdav` mode that accept requests from users or networks outside their trust boundary, especially multi-tenant setups sharing one served root. Installations that only use rclone as a client, or serve WebDAV only to trusted local users, are less exposed. The sources do not say whether authentication settings change exposure.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-25T14:16:59+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-116191","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116191","severity":null,"published_at":"2026-10-25T14:16:59+00:00","modified_at":"2026-10-25T14:16:59+00:00","first_seen_at":"2026-10-25T14:41:23+00:00","fetched_at":"2026-10-25T14:41:23+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}