{"id":"CVE-2026-116195","kind":"vulnerability","aliases":["CVE-2026-116195"],"related":[],"title":"Rclone: path traversal lets synced files change parent directory metadata","description":"Rclone before 1.75.2 contains a path traversal vulnerability in the local backend's translateLink function, which trims the .rclonelink suffix from a path after the containment check, so a name can resolve outside the destination root. Attackers can plant a directory named ...rclonelink in a source tree synced with --links and --metadata to change ownership, timestamps, and xattrs of the destination's parent directory.","summary":"Rclone before 1.75.2 trims the .rclonelink suffix from paths after its containment check in the local backend's translateLink function, so a crafted name can resolve outside the destination root. An attacker who plants a directory named ...rclonelink in a source tree can change the ownership, timestamps and xattrs of the destination's parent directory.","severity":"high","cvss":7.0,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["backup","ci","other","rclone","self-hosted"],"not_affected_if":["no-links-flag","no-metadata-flag","trusted-sources-only"],"how_to_check":"- Run `rclone version` and check whether it reports a version earlier than `1.75.2`.\n- Look for jobs that run rclone with `--links` and `--metadata` against local destinations, for example in cron entries or CI configs.","fix":"- Upgrade rclone to `1.75.2` or later.\n- Until the upgrade, avoid running `--links` with `--metadata` on source trees you do not trust.","status":"open","published_at":"2026-10-25T14:16:59+00:00","first_seen_at":"2026-10-25T14:41:23+00:00","triaged_at":"2026-10-25T14:42:42+00:00","updated_at":"2026-10-25T14:42:42+00:00","category":"other","confidence":0.7,"triage":{"at":"2026-10-25T14:42:42Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade rclone to `1.75.2` or later.\n- Until the upgrade, avoid running `--links` with `--metadata` on source trees you do not trust.","reach":"local","title":"Rclone: path traversal lets synced files change parent directory metadata","impact":"medium","summary":"Rclone before 1.75.2 trims the .rclonelink suffix from paths after its containment check in the local backend's translateLink function, so a crafted name can resolve outside the destination root. An attacker who plants a directory named ...rclonelink in a source tree can change the ownership, timestamps and xattrs of the destination's parent directory.","category":"other","nicknames":[],"who_cares":["rclone","self-hosted","backup","ci"],"confidence":0.7,"needs_auth":"unknown","worst_case":"Attacker changes ownership, timestamps and xattrs of parent directory","analyst_note":"","how_to_check":"- Run `rclone version` and check whether it reports a version earlier than `1.75.2`.\n- Look for jobs that run rclone with `--links` and `--metadata` against local destinations, for example in cron entries or CI configs.","needs_analyst":false,"not_affected_if":["no-links-flag","no-metadata-flag","trusted-sources-only"],"who_is_affected":"Teams that run rclone with the local backend as a destination and enable both --links and --metadata are exposed, and the risk comes from the source tree content being synced. Installs that do not use those flags, or that only sync trusted sources, can skip it.","user_interaction":"unknown","needs_special_setup":"yes","severity_if_unknown":"unknown"},"cost_usd":0.000983,"input_tokens":3348,"output_tokens":1297,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-116195':13A,16A '-2026':12A,15A '1.75.2':26B,81C 'attack':55B,115C 'backend':40B,90C 'backup':17B 'chang':7A,67B,132C 'check':36B,105C 'ci':18B 'contain':35B,82C,104C 'craft':46B 'cve':11A,14A 'destin':52B,75B,113C,139C 'directori':9A,59B,78B,119C,142C 'file':6A 'function':43B,93C 'host':23B 'let':4A 'link':128C 'local':39B,89C 'metadata':10A,130C 'name':47B,60B,108C,120C 'outsid':50B,111C 'ownership':69B,133C 'parent':8A,77B,141C 'path':2A,32B,84C,101C 'plant':57B,117C 'rclone':1A,20B,24B,79C 'rclonelink':29B,61B,97C,121C 'resolv':49B,110C 'root':53B,114C 'self':22B 'self-host':21B 'sourc':64B,124C 'suffix':30B,98C 'sync':5A,126C 'timestamp':70B,134C 'translatelink':42B,92C 'travers':3A,85C 'tree':65B,125C 'trim':27B,95C 'vulner':86C 'xattr':72B,136C","nicknames":[],"mitigations":[],"who_affected":"Teams that run rclone with the local backend as a destination and enable both --links and --metadata are exposed, and the risk comes from the source tree content being synced. Installs that do not use those flags, or that only sync trusted sources, can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-25T14:16:59+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-116195","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116195","severity":null,"published_at":"2026-10-25T14:16:59+00:00","modified_at":"2026-10-25T14:16:59+00:00","first_seen_at":"2026-10-25T14:41:23+00:00","fetched_at":"2026-10-25T14:41:23+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}