CyberRota Analysis
AI-GeneratedRclone versions prior to 1.75.0 are susceptible to a denial of service vulnerability in the WebDAV TUS creation handler, which can be exploited by a malicious endpoint to cause connection resets during uploads. This results in a panic that terminates unrecovered goroutines, potentially disrupting long-lived processes. Organizations using rclone for file transfers, especially those relying on WebDAV, should prioritize upgrading to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
rclone before v1.75.0 contains a denial of service vulnerability in the WebDAV TUS creation handler that dereferences a nil response before checking for transport errors. A malicious or compromised configured endpoint can reset connections during TUS uploads to trigger a panic that terminates unrecovered goroutines and halts unrelated work in long-lived processes.