low2.7
CVE-2026-79777
rclone before v1.75.0 includes full Go stack traces in RC API error responses when panics occur.
Impact
rclone before v1.75.0 includes full Go stack traces in RC API error responses when panics occur. Attackers can trigger panics to leak internal file paths, module versions, goroutine states, and memory addresses.
Affected products
| Product | Affected versions |
|---|---|
| Rclone | before 1.75.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.