CyberRota Analysis
AI-GeneratedRclone versions prior to 1.74.4 are vulnerable to a flaw that fails to remove the X-Amz-Security-Token header during S3 redirects from HTTPS to HTTP, potentially exposing AWS STS session tokens in plaintext. This could allow attackers to intercept sensitive session tokens through man-in-the-middle attacks. Organizations using rclone for S3 interactions should prioritize updating to mitigate the risk of credential theft.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
rclone before 1.74.4 fails to strip the X-Amz-Security-Token header when an S3 redirect changes scheme from HTTPS to HTTP on the same host. Attackers can intercept plaintext HTTP traffic to capture AWS STS session tokens sent in request headers.