—
GO-2026-6462
rclone serve s3: --auth-proxy without --auth-key authenticates nobody - full SigV4 signature bypass in github.com/rclone/rclone
Quick fix
GO-2026-6462 — github.com/rclone/rclone: upgrade to the fixed version with the command below.
go get github.com/rclone/rclone@v1.75.1Details
rclone serve s3: --auth-proxy without --auth-key authenticates nobody - full SigV4 signature bypass in github.com/rclone/rclone
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/rclone/rclone
Introduced in:
0Fixed in: 1.75.1Fix
go get github.com/rclone/rclone@v1.75.1