https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-27T22:42:14.202754+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-116189 CVE-2026-116189 — rclone 1.55.0 before 1.75.2 selfupdate Signature Verification Bypass via SHA256SUMS 2026-10-27T22:42:14.203712+00:00

Affected: rclone

rclone from 1.55.0 before 1.75.2 contains a signature verification bypass in stable selfupdate that trusts checksums from unsigned bytes preceding the PGP-clearsigned SHA256SUMS block. Attackers controlling the release distribution path can prepend an unsigned checksum line matching a malicious archive, causing selfupdate to install an attacker-controlled rclone executable.