CVE-2026-79778

Published: Ago 25, 2026 Last Modified: Ago 25, 2026

ExploitDB:

Other exploit source:

Google Dorks:

MEDIUM 6,0

Source: [email protected]

Attack Vector: network

Attack Complexity: high

Privileges Required: none

User Interaction: passive

Confidentiality: N/A

Integrity: N/A

Availability: N/A

MEDIUM 5,3

Source: [email protected]

Attack Vector: network

Attack Complexity: high

Privileges Required: none

User Interaction: required

Scope: unchanged

Confidentiality: none

Integrity: none

Availability: high

Description

AI Translation Available

rclone before v1.75.0 contains a denial of service vulnerability in the WebDAV TUS creation handler that dereferences a nil response before checking for transport errors. A malicious or compromised configured endpoint can reset connections during TUS uploads to trigger a panic that terminates unrecovered goroutines and halts unrelated work in long-lived processes.

248

Uncaught Exception

Draft

Abstraction: Base Structure: Simple

Common Consequences

Security Scopes Affected:

Availability Confidentiality

Potential Impacts:

Dos: Crash, Exit, Or Restart Read Application Data

Applicable Platforms

Languages: C++, Java, C#

View CWE Details

https://github.com/rclone/rclone/security/advisories/GHSA-3…

https://github.com/rclone/rclone/security/advisories/GHSA-3x6r-wxxg-53vv