CyberRota Analysis
AI-GeneratedRclone versions prior to 1.75.0 are vulnerable due to the pprof debug handler being improperly mounted, allowing unauthenticated access to the /debug/pprof/cmdline endpoint. This exposure can lead to the disclosure of sensitive information, including backend credentials. Organizations using affected versions should prioritize upgrading to mitigate the risk of credential theft and unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
rclone before 1.75.0 mounts the pprof debug handler as its own router route, bypassing the fail-closed authentication rule in the main handler. Attackers can access the /debug/pprof/cmdline endpoint unauthenticated to retrieve the full process argv including backend credentials.