PatchTheCVErclone vulnerabilities and fixes
Recent CVEs affecting rclone, with upgrade or downgrade steps. 6 tracked.
rclone has 6 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 6. Most recent: 2026-09-10. Highest priority: CVE-2026-88018 (score 50/100).
- CVE-2026-88015 MEDIUM 5.3 UPGRADE rclone is a command-line program to sync files and directories to and from different cloud storage providers
- CVE-2026-88014 MEDIUM 6.3 UPGRADE rclone is a command-line program to sync files and directories to and from different cloud storage providers
- CVE-2026-88013 LOW 3.7 UPGRADE rclone is a command-line program to sync files and directories to and from different cloud storage providers
- CVE-2026-88016 HIGH 7.1 UPGRADE rclone is a command-line program to sync files and directories to and from different cloud storage providers
- CVE-2026-88018 CRITICAL 9.8 UPGRADE rclone is a command-line program to sync files and directories to and from different cloud storage providers
- CVE-2026-88017 HIGH 7.3 UPGRADE rclone is a command-line program to sync files and directories to and from different cloud storage providers
FAQ
How do I fix rclone vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is rclone being exploited right now?
None of the tracked rclone CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which rclone CVE should I patch first?
CVE-2026-88018 currently ranks highest (50/100): rclone is a command-line program to sync files and directories to and from different cloud storage providers.