CyberRota Analysis
AI-GeneratedRclone versions prior to 1.75.0 are vulnerable to information disclosure due to the inclusion of full Go stack traces in RC API error responses triggered by panics. This vulnerability allows attackers to exploit the error handling mechanism to leak sensitive internal details such as file paths, module versions, and memory addresses. Organizations using affected versions of rclone should prioritize updating to mitigate potential information leakage risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
rclone before v1.75.0 includes full Go stack traces in RC API error responses when panics occur. Attackers can trigger panics to leak internal file paths, module versions, goroutine states, and memory addresses.