—
GO-2026-5466
Unauthenticated backend instantiation in github.com/rclone/rclone
빠른 조치
GO-2026-5466 — github.com/rclone/rclone: 아래 명령으로 수정 버전으로 올리세요.
go get github.com/rclone/rclone@v1.73.5상세
The operations/fsinfo remote control (RC) endpoint in rclone was registered without requiring authentication. This allowed unauthenticated callers to instantiate arbitrary backends via inline backend definitions, which could lead to local command execution if the backend configuration allows it (e.g., via bearer_token_command in webdav or ssh in sftp).
이 버전이 영향받나요?
사용 중인 패키지 버전을 입력하면 즉시 평가합니다.
영향 패키지
Go / github.com/ncw/rclone
최초 영향 버전:
1.48.0 No fixed version published yet for github.com/ncw/rclone (go modules). Pin to a known-safe version or switch to an alternative.
Go / github.com/rclone/rclone
최초 영향 버전:
1.49.0 수정 버전: 1.73.5 수정
go get github.com/rclone/rclone@v1.73.5