CyberRota Analysis
AI-GeneratedRclone versions prior to 1.74.4 are vulnerable due to improper handling of special permission bits when applying source-supplied mode metadata, which can allow attackers to set setuid/setgid bits on files. This vulnerability can lead to privilege escalation if rclone is executed with elevated permissions, enabling attackers to execute malicious binaries with root or service account privileges. Organizations using rclone, especially in environments where it operates with elevated permissions, should prioritize updating to mitigate potential security risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
rclone before 1.74.4 fails to mask special permission bits when applying source-supplied mode metadata in the local backend, allowing attackers to set setuid/setgid bits on attacker-controlled files. When copying with metadata preservation from an untrusted remote, attackers can plant a setuid binary that escalates privileges to root if rclone runs as root, or to the service account user otherwise.